b-open-io/perf-audit
skills/perf-audit/SKILL.md
Run local performance audits on a project without network calls. This skill should be used when the user says 'audit performance', 'check bundle size', 'find large images', 'check for heavy dependencies', 'run a perf audit', 'how big is my bundle', 'optimize images', 'find oversized assets', or before any performance optimization work. Also use when an agent needs baseline metrics before making changes. All scripts output structured JSON to stdout.
$ install --global
skillsauthnpx skillsauth add b-open-io/prompts perf-auditInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 29, 2026, 3:23 AM69.8s8 files scanned
SKILL.md
- name:
- perf-audit
- description:
- Run local performance audits on a project without network calls. This skill should be used when the user says 'audit performance', 'check bundle size', 'find large images', 'check for heavy dependencies', 'run a perf audit', 'how big is my bundle', 'optimize images', 'find oversized assets', or before any performance optimization work. Also use when an agent needs baseline metrics before making changes. All scripts output structured JSON to stdout.
Performance Audit
Run local, deterministic performance audits. All scripts output JSON to stdout, use only standard unix tools, and make zero network calls.
Scripts
Full Audit (start here)
Runs all audits in parallel and produces a unified report with a health score (0-100).
bash <skill-path>/scripts/full-audit.sh /path/to/project
Returns:
{
"health_score": 85,
"image_audit": { ... },
"bundle_audit": { ... },
"dep_audit": { ... }
}
Image Audit
Scan for oversized images, missing next-gen formats, and dimension info.
bash <skill-path>/scripts/image-audit.sh /path/to/project
Flags images over 500KB as oversized. Uses sips on macOS for dimensions. Reports images without a WebP/AVIF equivalent.
Bundle Audit
Analyze JS and CSS bundle sizes in build output directories (.next, dist, build, out).
bash <skill-path>/scripts/bundle-audit.sh /path/to/project
Reports raw and gzipped sizes for every bundle file. Flags source maps in production. Requires a build to exist -- run the project's build command first if no build output is found.
Dependency Audit
Check package.json for known-heavy dependencies and suggest lighter alternatives.
bash <skill-path>/scripts/dep-audit.sh /path/to/project
Checks against a curated list of heavy packages (moment, lodash, jquery, full icon libraries, etc.) and suggests tree-shakable or lighter replacements.
Workflow
- Run
full-audit.shto get the baseline health score - Review each sub-audit for specific issues
- Fix issues (optimize images, swap deps, configure tree-shaking)
- Re-run
full-audit.shto measure improvement - Include before/after scores in your completion report
Related Skills
b-open-io/claudex
tools
VerifiedTrustedCommunity
This skill should be used when a Claude Code session needs to keep working after Anthropic usage runs out, or when the user asks to run the Claude Code harness on GPT-5.6 Sol. Trigger phrases include "my Anthropic usage ran out", "I'm out of Claude usage", "usage limit reached, what now", "keep working on another model", "run Claude Code on GPT-5.6 Sol", "use GPT-5.6 Sol as the model", "set up claudex", "claudex isn't working", "route the harness through CLIProxyAPI", or "bill against my ChatGPT/Codex subscription". It stands up a local proxy so the Claude Code CLI runs on OpenAI's Codex backend as an escape hatch, and diagnoses that setup when it drifts. macOS + Homebrew.
14SKILL.mdUpdated Jul 17, 2026
b-open-io/visual-wayfinder
testing
VerifiedTrustedCommunity
This skill should be used when the user asks to "open Visual Wayfinder", "answer a Wayfinder ticket visually", "turn this decision into a configurator", "show Wayfinder choices as a dashboard", "prototype the Wayfinder questionnaire", or wants interactive choice cards, tradeoff controls, rankings, ranges, toggles, and consequence previews for one active Wayfinder decision. It wraps the Wayfinder skill and JSON Render; it never replaces the tracker or resolves more than the active decision.
14SKILL.mdUpdated Jul 16, 2026
b-open-io/visual-proposal
development
VerifiedTrustedCommunity
This skill should be used when the user asks to "make a visual proposal", "write this up so I can share it", "present these options visually", "diagram the trade-offs", "turn this plan into something reviewable", or requests a shareable design pitch, architecture proposal, RFC, options comparison, or visual roadmap for work that has not been built. It produces one self-contained, theme-aware HTML page led by grounded diagrams. Use visual-review instead for completed code changes; do not use this skill for internal task tracking.
14SKILL.mdUpdated Jul 16, 2026
b-open-io/plugin-settings
tools
VerifiedTrustedCommunity
This skill should be used when the user asks to "add plugin settings", "make a plugin configurable", "store per-project plugin configuration", "use settings.local.json", "create a plugin state file", "expose skill settings in Agent Master", or "add a skill interface". Distinguishes official Claude Code settings from project-owned configuration and documents bOpen Agent Master skill interface discovery.
14SKILL.mdUpdated Jul 16, 2026