nextjs-react-expert — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited nextjs-react-expert (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The fastest wins almost always come from the same two places: stop fetching data one request at a time, and stop shipping JavaScript the user never runs. Work the list below in roughly that order — structural fixes first, micro-optimizations last.
The detail lives in the numbered reference files, not here. Open only the file that matches the problem in front of you. Each file is self-contained and groups a set of concrete rules with before/after code.
| File | Severity | Reach for it when |
|---|---|---|
1-async-eliminating-waterfalls.md | Highest | Pages stall on chained awaits; requests run in series |
2-bundle-bundle-size-optimization.md | Highest | First-load JS is heavy; interactivity arrives late |
3-server-server-side-performance.md | High | SSR is slow, server actions need hardening, RSC payloads bloat |
4-client-client-side-data-fetching.md | Medium-high | Duplicate client requests, SWR, storage, listener sharing |
5-rerender-re-render-optimization.md | Medium | Components render too often; memoization questions |
6-rendering-rendering-performance.md | Medium | Long lists, hydration flashes, image and SVG cost |
7-js-javascript-performance.md | Lower | Tight-loop and algorithmic clean-ups in hot code |
8-advanced-advanced-patterns.md | Situational | One-time init, callback refs, effect-event hooks |
9-cache-components.md | Next.js 16+ | use cache, cacheLife, cacheTag, PPR |
Symptom Start here
------------------------------ ----------------------------
Long time-to-interactive → Files 1 and 2
First-load bundle too big → File 2 (splitting, deep imports)
Server response is slow → File 3 (parallel RSC, streaming)
UI janks / renders too much → File 5 (render hygiene)
Scrolling / paint is rough → File 6 (virtualization, layout)
Redundant client requests → File 4 (SWR, dedupe)
On Next.js 16 caching → File 9 (Cache Components)saves a full network round trip. File 2 cuts the bytes that delay interactivity.
server-to-client boundary.
browser once the big wins are banked.
profiler points you.
Must hold before shipping:
SuspenseWorth confirming:
content-visibilitynext/imageNice to have:
Set/Map, not Array.includesperformance panel tell you where the time actually goes.
micro-optimizations.
next/image, next/font, automatic fetchmemoization, and optimizePackageImports solve common problems for free.
browser never downloads.
probably can't either.
awaits is a chain of round trips.Run a quick automated scan with the bundled auditor:
python scripts/react_performance_checker.py <project_path>It flags likely waterfalls, barrel imports, un-split heavy components, useEffect fetching, missing memoization, and raw <img> usage, then prints a prioritized report. scripts/convert_rules.py is a maintenance helper that rebuilds the numbered reference files from a per-rule source tree.
| For | Use |
|---|---|
| API design | @[skills/api-patterns] |
| Database tuning | @[skills/database-design] |
| Test design | @[skills/testing-patterns] |
| UI and UX | @[skills/frontend-design] |
| TypeScript | @[skills/typescript-expert] |
| Deploy and ops | @[skills/deployment-procedures] |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.