performance-review

performance-review is a skill for Claude Code, Codex from vmobifystudio/app-dev-team. It costs 75 tokens per session (712 once invoked), scanned A, original, MIT.

Use as a review dimension on any diff that could cost startup time, frames, memory, battery, bandwidth or bundle size — by code-reviewer during review and by web-developer and test-automation-engineer before claiming a UI or harness ticket done. The studio's position is that this is a dimension with existing auditors…

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/vmobifystudio/app-dev-team/performance-review
Any agent
npx skills add vmobifystudio/app-dev-team --skill performance-review
Clone the repo
git clone --depth 1 https://github.com/vmobifystudio/app-dev-team

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for performance-review

README.md
[![agentmods](https://agentmods.dev/badge/skills/vmobifystudio/app-dev-team/performance-review.svg)](https://agentmods.dev/skills/vmobifystudio/app-dev-team/performance-review)
Your own site
<a href="https://agentmods.dev/skills/vmobifystudio/app-dev-team/performance-review"><img src="https://agentmods.dev/badge/skills/vmobifystudio/app-dev-team/performance-review.svg" alt="Measured on agentmods" height="20"></a>
Per session 75 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 712 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin unknown No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00075 $0.00712
Opus 5 $0.00037 $0.00356
Sonnet 5 $0.00015 $0.00142
Haiku 4.5 $0.00007 $0.00071

Measured today against content hash 4b04d865106a, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

performance-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/performance-review/SKILL.md · 52 lines

How it starts

The opening of the file, as written. The whole thing — 52 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Performance review

Performance is a budget, and a budget only exists if something can exceed it. The budgets live in docs/20-architecture.md §8; if that section is empty, that is the finding.

Spawn the platform auditor first and fold its findings in — axiom:swiftui-performance-analyzer, axiom:swift-performance-analyzer, axiom:memory-auditor, axiom:energy-auditor on Apple platforms. All external and optional (separate plugins) — missing → record N/A: <tool> — not installed, walk the list below by hand, never file the absence as a defect.

Measure, then read the diff

A performance finding with no number is an opinion. Every finding names: the metric, the value, the budget it is measured against, the device or environment, and the build. Where you could not measure, the verdict is CANNOT EVALUATE — not a guess dressed as a warning.

The dimensions

Dimension Budget it spends What to look for in a diff
Startup cold launch to first interaction work moved into app init, eager singletons, sync I/O on the launch path
Frames 60/120fps, jank-free scroll layout or allocation per frame, unbounded list without recycling, expensive work in a view body
Memory peak and steady-state full-size images held, unbounded caches, retain cycles, accumulating observers
Battery / energy background and foreground drain polling instead of push, wake locks, continuous location, timers that never stop
Network bytes and round trips N+1 requests, no pagination, no caching headers, retry without backoff
Storage disk footprint and write amplification writing on every keystroke, unbounded logs, no eviction policy
Bundle / binary download size a whole library imported for one function, unsplit routes, uncompressed assets

The rules

  • Measure before optimising, and measure the thing users feel. A 40% faster function on a path that runs once at midnight is not a result.
  • Regressions are found by comparing to a baseline, so record the baseline value in the ticket. No baseline, no regression detection — that is how these arrive silently.
  • A cache is a correctness decision, not a performance one. Every cache added must state its invalidation rule; an unstated one is a stale-data defect waiting.
  • Never optimise by removing a bound. Widening a page size, dropping a limit or removing a timeout trades a slow path for an unbounded one.

Read the full file on GitHub · 52 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today First seen · 52 lines · 75 tokens per session scan A 4b04d865106a

Subscribe to this mod's changes

performance-review is a skill published in the GitHub repository vmobifystudio/app-dev-team (4 stars, last pushed 24d ago), licensed MIT. It adds 75 tokens to every session and 712 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Related

Other skills, from other repositories

archon

Autonomous multi-session campaign agent. Decomposes large work into phases, delegates to sub-agents, reviews output, and maintains campaign state across context windows. Use for work that spans multiple sessions and needs persistent state, quality judgment, and strategic decomposition.

SethGammon/Citadel · 54 tokens

marshal

Meta-orchestrator that takes any direction — broad, specific, or vague — and autonomously chains skills and context into actionable work. Gathers context from codebase, docs, and memory. Only asks the user when it genuinely cannot proceed. Single-session orchestrator.

SethGammon/Citadel · 56 tokens

wiki

Markdown-first knowledge base where the LLM acts as librarian. Ingests raw sources, compiles and interlinks topic files, self-maintains an index. No vector DB or embeddings required -- uses LLM-native navigation over structured markdown up to 400K words.

SethGammon/Citadel · 56 tokens

init

Opt-in onboarding for the mARC agent team. Scaffolds a per-repo team binding so the team graduates from ephemeral session-memory to persistent, versioned config — without ever writing a file silently. Discovers the repo's org/repo/ project at runtime via gh, prefills {{ agentsdir }}/team.toml, and (optionally) a lean…

NexaDuo/mARC · 122 tokens

execute-task

Implement one task (or a cohesion bundle) from a signed-off spec (Ready or Active): recompute the execution freshness gate, write the verifying test first, implement to green, run the project's full CI with adaptive retry, converge via the configured reviewsequence (default /polish --nested), then open a draft PR…

inkatze/planwright · 111 tokens

builder

Detect a project's stack and recommend or apply the universal mechanical quality guards from planwright's core catalog (formatter, linters, type-checker, test runner, secret scan, commit hooks, CI gate), plus the growable breadth dimensions. Escalates stake-bearing decisions (auth, data modeling, security posture…

inkatze/planwright · 100 tokens