perf-profiler — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited perf-profiler (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
先确认或从项目中核实:
没有明确目标时,先用现有监控、benchmark 或用户现象缩小范围,不把“代码看起来慢”当成瓶颈结论。
优先复用项目已有的启动、benchmark、trace 和 profiling 配置。在相同环境、数据和负载下记录:
无法运行项目时,只能进行静态分析,并把发现标为“待验证候选”。
按技术栈选择 profiler、trace、火焰图、查询计划、网络时序或内存快照,定位时间或资源实际消耗的位置。常见维度包括:
复杂度分析和代码审查只能证明风险,不能单独证明运行时影响。
修改后使用与基线一致的环境、数据、负载、预热和统计口径复测,并运行受影响功能的正确性测试。报告原始结果、波动、差异和尚未控制的变量。
只有真实完成同条件测量后,才能写耗时、百分比或“已改善”等确定性结论。
EXPLAIN ANALYZE 及索引、缓存、连接池、CDN 或外部服务配置变更必须获得明确授权。## 性能分析结果
- 目标指标与场景:
- 环境、版本与数据规模:
- 基线与测量方法:
## 发现
| 证据等级 | 位置 | 证据 | 影响与限制 |
|----------|------|------|------------|
## 改动与权衡
## 同条件复测
- 正确性验证:
- 性能结果:
- 未控制变量与待验证项:
- 回滚方式:~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.