benchmarking-with-hyperfine — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited benchmarking-with-hyperfine (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
--reference unless parameter sweeps require listing the baseline as a normal command.hyperfine --version. If it is older than the flags needed, ask to install or pin a newer release.hyperfine --warmup 3 'cmd-a' 'cmd-b'hyperfine -N --warmup 5 --min-runs 200 './bin'hyperfine --prepare 'make clean' 'make -j8'hyperfine -P threads 1 16 'make -j {threads}'hyperfine -L compiler gcc,clang '{compiler} -O2 main.c'hyperfine -n old './old' -n new './new'hyperfine --reference './main' './candidate'hyperfine --export-json r.json --export-markdown r.md 'cmd'--warmup 3 for normal warm-cache timings.--prepare to reset state before every run when measuring cold-cache or clean-state behavior.sudo -v before benchmarks whose hooks use sudo.--show-output except while debugging.hyperfine is installed, available, or at a specific version unless you ran hyperfine --version or the user supplied that fact. hyperfine --warmup 3 --min-runs 30 \
--export-json bench.json --export-markdown bench.md \
'cmd-a' 'cmd-b'1.0x.--min-runs when trying to detect small effects.--setup; put per-run state reset in --prepare. --prepare runs before warmup iterations too.-N only when the command can be executed without shell features. No globbing, ~, redirection, pipes, &&, shell builtins, or aliases.--time-unit.-n, each name labels the immediately following command. Do not both label commands and append duplicate unnamed commands later.--reference for a parameterized baseline; the reference command does not participate in -L or -P sweeps.--reference once per parameter value, or export a combined sweep and compute main-vs-candidate ratios from JSON grouped by parameters. Do not claim the first command is the baseline in a sweep.a.json b.json); do not pass one combined export unless you have verified the script supports that mode.When giving commands without running them, use this plan format:
## Benchmark plan
Question: [what will be compared]
Method: [warm/cold cache, warmups, runs/min-runs, hooks, exports]
Commands:
[exact hyperfine command]
How to interpret:
[decision rules]
Caveats:
[noise, cache state, CI limits]Use this result format only after actually running a benchmark or receiving results:
## Benchmark result
Question: [what was being compared]
Environment: [OS, CPU if known, hyperfine version]
Method: [warm/cold cache, warmups, runs/min-runs, hooks, exports]
Commands:
- [label]: `[command]`
Result:
[short summary; include median/mean and whether difference is distinguishable]
Artifacts:
- JSON: `[path]`
- Markdown: `[path]`
Caveats:
- [noise, CI runner limits, cache state, inconclusive intervals]~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.