skills/council/tuner/performance-audit/SKILL.md
Use when profiling application performance or diagnosing slow page loads. Covers full-stack bottleneck identification including Core Web Vitals, bundle analysis, database queries, and network waterfall. Do not use for cache architecture design (use caching-strategy) or capacity planning (use load-modeling).
npx skillsauth add dtsong/my-claude-setup performance-auditInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Identify performance bottlenecks across the full stack — rendering, network, bundle, database, and infrastructure. Produces a profiled baseline, a prioritized bottleneck inventory, and an optimization roadmap with estimated impact for each recommendation.
No user-provided values are used in commands or file paths. All inputs are treated as read-only analysis targets.
Run Lighthouse (or equivalent) on key pages. Record Core Web Vitals: LCP, CLS, INP, TTFB. Capture p50, p95, and p99 values where available. Document the baseline as the reference point for all improvements.
Analyze the critical rendering path:
Inspect the JavaScript and CSS bundles:
Review server-side data access patterns:
Analyze the network request pattern:
Compile field data (CrUX) and lab data (Lighthouse) into a scorecard:
Rank each finding by impact (estimated improvement) and effort (implementation cost):
Compaction resilience: If context was lost during a long session, re-read the Inputs section to reconstruct what system is being analyzed, check the Progress Checklist for completed steps, then resume from the earliest incomplete step.
# Performance Audit: [Application/Page Name]
## Baseline Scorecard
| Metric | Current | Target | Status |
|--------|---------|--------|--------|
| LCP | ... | ... | ... |
| CLS | ... | ... | ... |
| INP | ... | ... | ... |
| TTFB | ... | ... | ... |
| Bundle Size (gzip) | ... | ... | ... |
| Request Count | ... | ... | ... |
## Bottleneck Inventory
### Critical (High Impact)
1. **[Bottleneck name]** — [Description, current metric, estimated improvement]
### Moderate (Medium Impact)
1. **[Bottleneck name]** — [Description, current metric, estimated improvement]
### Minor (Low Impact)
1. **[Bottleneck name]** — [Description, current metric, estimated improvement]
## Optimization Roadmap
| Priority | Optimization | Expected Impact | Effort | Metric Affected |
|----------|-------------|-----------------|--------|-----------------|
| P0 | ... | ... | ... | ... |
| P1 | ... | ... | ... | ... |
| P2 | ... | ... | ... | ... |
## Database Query Findings
| Query/Pattern | Issue | Current Cost | Recommendation |
|--------------|-------|-------------|----------------|
| ... | ... | ... | ... |
## Bundle Analysis
| Chunk | Size (gzip) | Purpose | Optimization |
|-------|-------------|---------|-------------|
| ... | ... | ... | ... |
development
Use when the council needs to surface organizational knowledge buried across multiple internal sources (wikis, design docs, ADRs, past tickets, postmortems, chat archives, code repos). Plans where to look, what to cross-reference, and how to synthesize findings into evidence the council can act on. Do not use for external market research (use competitive-analysis), library evaluation (use library-evaluation), or technology trend assessment (use technology-radar).
testing
Use to convert a Word .docx file to PDF and/or verify its page count. Triggers on: converting docx to pdf, rendering a document, checking how many pages a docx produces, or asserting a page-count constraint (e.g. a resume must stay 2 pages). Wraps LibreOffice headless conversion.
development
Security audit checklist for web applications. Use when reviewing, auditing, or hardening a web app's security posture. Covers rate limiting, auth headers, IP blocking, CORS, security middleware, input validation, file upload limits, ORM usage, and password hashing. Triggers on requests like "review security", "harden this app", "security audit", "check for vulnerabilities", or when building/reviewing API endpoints.
development
Interactive wizard to craft effective prompts using Claude Code best practices