performance — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited performance (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Any task involving response time, resource usage, bundle size, database query performance, or user-perceived load time metrics.
"Optimisation without a target is premature optimisation."
Database queries:
SELECT * — select only the columns neededEXPLAIN ANALYZE (PostgreSQL) or EXPLAIN (MySQL) to verify query plansAPI response time:
min=2, max=CPU * 2 + 2 per instance, then tune to DB limits and workloadCaching strategy: Defaults below — tune per data freshness requirements and invalidate on writes.
| Data type | Recommended cache | TTL |
|---|---|---|
| User session data | Redis | 24 hours |
| Computed aggregates | Redis | 1–5 minutes |
| Static reference data | Redis | 1 hour |
| User-specific data | Redis with user key | 15 minutes |
| API responses | HTTP Cache-Control | depends on freshness needs |
Bundle size budgets:
| Asset | Budget (gzipped) |
|---|---|
| Initial JavaScript | < 200KB |
| Initial CSS | < 50KB |
| Per-route chunk | < 100KB |
| Images (hero) | < 200KB WebP |
| Fonts | < 50KB per weight |
Core Web Vitals targets (Google's thresholds):
| Metric | Good | Needs improvement | Poor |
|---|---|---|---|
| LCP (Largest Contentful Paint) | < 2.5s | 2.5–4s | > 4s |
| INP (Interaction to Next Paint) | < 200ms | 200–500ms | > 500ms |
| CLS (Cumulative Layout Shift) | < 0.1 | 0.1–0.25 | > 0.25 |
Implementation patterns:
React.lazy() + Suspensenext/image or equivalent. Always specify width/height.font-display: swap. Preload critical fonts.useMemo / useCallback where measuredSSR/SSG guidance:
# Backend: measure API response time
curl -w "@curl-format.txt" -o /dev/null -s https://api.example.com/endpoint
# Frontend: Lighthouse CI
npx lighthouse https://example.com --output json --output-path ./lighthouse.json
# Bundle analysis
npx bundle-analyzer stats.json
# Node.js profiling
node --prof app.js
node --prof-process isolate-*.log > profile.txt
# Database: explain query
EXPLAIN ANALYZE SELECT * FROM users WHERE email = '[email protected]';Before marking any task done that involves a query or endpoint:
SELECT * in production queriesWrite performance notes to SUMMARY.md:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.