Borrowing it
Nothing to install: this file belongs to systemowiec/ai-agents-workspace-starter. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/systemowiec/ai-agents-workspace-starter/main/.agents/skills/performance-audit/SKILL.mdgit clone --depth 1 https://github.com/systemowiec/ai-agents-workspace-starterWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/systemowiec/ai-agents-workspace-starter/performance-audit)<a href="https://agentmods.dev/skills/systemowiec/ai-agents-workspace-starter/performance-audit"><img src="https://agentmods.dev/badge/skills/systemowiec/ai-agents-workspace-starter/performance-audit/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/systemowiec/ai-agents-workspace-starter/performance-audit"><img src="https://agentmods.dev/badge/skills/systemowiec/ai-agents-workspace-starter/performance-audit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00042 | $0.00657 |
| Opus 5 | $0.00021 | $0.00329 |
| Sonnet 5 | $0.00008 | $0.00131 |
| Haiku 4.5 | $0.00004 | $0.00066 |
Grade A, and why
performance-audit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 79 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Performance Audit
Overview
Structured checklist for identifying and fixing performance bottlenecks in frontend and backend code.
When to Use
- Investigating slow page loads or API responses
- Reviewing new code for performance anti-patterns
- Auditing database queries for N+1 or missing indexes
- Reducing frontend bundle size or render overhead
When NOT to use:
- Premature optimization without measured bottleneck
- Micro-optimizations with no measurable impact
- Architectural redesigns (that's an architect task)
Checklist
Frontend Performance
- No unnecessary re-renders (missing
React.memo,useMemo,useCallback) - Expensive computations memoized
- Large routes use code splitting (
lazy()/ dynamicimport()) - Images below fold use lazy loading (
loading="lazy") - Long lists use virtualization (react-window, tanstack-virtual)
- Frequent events debounced/throttled (search input, scroll, resize)
- No unused CSS or JS loaded on page
- Critical assets preloaded
- No synchronous operations blocking main thread
Backend Performance
- No N+1 query patterns (use eager loading /
selectinload) - Frequently queried columns have database indexes
- Expensive operations use caching (Redis, in-memory)
- I/O-bound operations are async
- Large datasets use pagination (never unbounded
SELECT *) - No O(n^2) algorithms where O(n) is possible
- Connection pooling configured for DB and external services
- Repeated API calls batched where possible
- Large payloads use compression (gzip/brotli)
General
- No redundant calculations inside loops
- Appropriate data structures for the use case (set vs list for lookups)
- Early returns to skip unnecessary processing
- No unnecessary deep cloning or copying
- Lazy initialization for expensive-to-create objects
Process
- Measure - identify actual bottleneck (don't guess)
- Profile - run checklist against the hot path
- Optimize - implement fix with minimal code change
- Verify - measure again to confirm improvement
- Document - add comment explaining why the optimization exists
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 79 lines · 42 tokens per session scan A 794ef880fa5d
performance-audit is a skill published in the GitHub repository systemowiec/ai-agents-workspace-starter (2 stars, last pushed 5mo ago), licensed MIT. It adds 42 tokens to every session and 657 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
fix-failing-tests
Diagnose a failing test in the googleapis/mcp-toolbox repo and land a fix by reasoning from the actual error: read the failure, reproduce it, shrink it until the cause is forced into the open, then fix the cause. Use this whenever a test or CI job is red, a build breaks after a change, many packages fail at once, or a…
triage-issues
Triage GitHub issues in the googleapis/mcp-toolbox repo: propose the correct labels (type / priority / product / status), check for duplicates, verify a bug has enough info to act on, and draft a triage comment. Use whenever a maintainer asks you to triage, label, categorize, prioritize, or "look at" an issue (or a…
postgresql-indexing
PostgreSQL indexing best practices for Prowler: index design, partial indexes, partitioned table indexing, EXPLAIN ANALYZE validation, concurrent operations, monitoring, and maintenance. Trigger: When creating or modifying PostgreSQL indexes, analyzing query performance with EXPLAIN, debugging slow queries, reviewing…
graphjin-eval
Create, extend, run, baseline, and diagnose GraphJin agent evaluations through the graphjin eval CLI.
axiom-audit-grdb-performance
Use when the user mentions GRDB performance review, slow GRDB queries, app-group database setup audit, a ValueObservation that stopped updating, or pre-release GRDB scan.
django-perf-review
Django performance code review. Use when asked to "review Django performance", "find N+1 queries", "optimize Django", "check queryset performance", "database performance", "Django ORM issues", or audit Django code for performance problems.