perf-bar — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited perf-bar (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
My performance/algorithmic bar. Usable standalone on a diff, fed into the SPIKE sub-phase of eskills:task-flow (approach selection), and invoked by its per-task review. It earns its own lens because bottlenecks are a recurring core challenge. (This is the 4th lens — the hard cap; a new lens must displace one.)
loop on a small list is fine, on a hot path it isn't. Don't micro-optimize cold code.
over-fetching, sending a whole row when a version number would do.
Same lens, applied to the stack in play — the footgun I hit most in each:
memo/useMemo/useCallback), stable list keys, split context; virtualize long lists. Profile with the React DevTools profiler, don't guess.select_related (FK) / prefetch_related (M2M); fetch only needed columns (.only()/.values()); never run a query inside a template or loop.async def stalls the event loop → use an async client or offload to a threadpool; keep CPU-bound work off the loop.Dispatchers.IO for blocking calls, wrap with withContext; no runBlocking on hot paths; don't re-collect cold Flows needlessly.The Free-tier wall is egress (bytes transmitted), not DB size. Egress ≈ blob_size × updates × connected_clients. Levers, in order:
hard cap — uncapped blobs grow quadratically and blow the limit.
{version} over Realtime;fetch the full payload only when the remote version is newer (version-gated fetch).
When the task is flagged hard-tech: in the SPIKE, benchmark candidate approaches on representative input before committing the plan — measure, don't guess. Keep the micro-benchmark; it's the evidence the approach was chosen on merit.
Report findings as location → cost (Big-O / bytes / queries) → the lever. Separate a measured regression from a theoretical one; prefer numbers.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.