neohaskell/docs/archive/2026-07-ai-artifacts/claude-skills/feature-pipeline-preview/13-performance-impl/01-static-scan
docs/archive/2026-07-ai-artifacts/claude-skills/feature-pipeline-preview/13-performance-impl/01-static-scan/SKILL.md
> **ARCHIVAL KNOWLEDGE — DO NOT USE OR REFERENCE.** > Superseded by `codemap/` + root `AGENTS.md`. Scheduled for deletion once the pipeline is verified (Phase 6). > Manifest: `docs/archive/2026-07-ai-artifacts/MANIFEST.md` --- name: 01-static-scan description: Runs the static performance checks script across changed files and emits raw findings JSON. kind: leaf executor: script model: claude-haiku-4-5-20251001 --- # Static Performance Scan Runs `perf-static-checks.py` against the implementati
$ install --global
skillsauthnpx skillsauth add neohaskell/neohaskell docs/archive/2026-07-ai-artifacts/claude-skills/feature-pipeline-preview/13-performance-impl/01-static-scanInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 8, 2026, 7:43 AM144.2s1 file scanned
SKILL.md
ARCHIVAL KNOWLEDGE — DO NOT USE OR REFERENCE. Superseded by
codemap/+ rootAGENTS.md. Scheduled for deletion once the pipeline is verified (Phase 6). Manifest:docs/archive/2026-07-ai-artifacts/MANIFEST.md
name: 01-static-scan description: Runs the static performance checks script across changed files and emits raw findings JSON. kind: leaf executor: script model: claude-haiku-4-5-20251001
Static Performance Scan
Runs perf-static-checks.py against the implementation's changed files and emits a raw findings JSON array.
Inputs
- The changed Haskell file list from
git diff --name-only HEAD -- '*.hs' '*.lhs'(the pathspec keeps an empty match exit-code 0;.lhsis included becauseperf-static-checks.pyaccepts both extensions).
Plan
- Compute the changed Haskell files list → verify: list captured.
- Invoke
perf-static-checks.pywith the list → verify: stdout is a JSON array. - Surface stderr on non-zero exit → verify: caller sees the failure.
- Emit the JSON to stdout for the deep-audit step → verify: stdout parses.
Assumptions:
- Empty changed list yields
[]and exit 0. - The script writes findings to stdout and diagnostics to stderr.
If any assumption fails, refuse — do not guess.
Steps
- Compute changed files:
git diff --name-only HEAD -- '*.hs' '*.lhs'(pathspec is empty-match safe — nogreppipe). - Run:
python3 .claude/skills/feature-pipeline-preview/scripts/perf-static-checks.py <files...>. - If exit is non-zero, surface stderr and exit non-zero.
- Otherwise pass stdout through unchanged.
Output
JSON array of static performance findings on stdout.
Refusals
- Script not found → refuse: "perf-static-checks.py missing".
- Repo not a git working tree → refuse: "not in a git repo".
Related Skills
neohaskell/docs/archive/2026-07-ai-artifacts/claude-skills/neohaskell-style-guide
development
VerifiedTrustedCommunity
> **ARCHIVAL KNOWLEDGE — DO NOT USE OR REFERENCE.** > Superseded by `codemap/` + root `AGENTS.md`. Scheduled for deletion once the pipeline is verified (Phase 6). > Manifest: `docs/archive/2026-07-ai-artifacts/MANIFEST.md` --- name: neohaskell-style-guide description: NeoHaskell coding style reference and enforcement rules. Load when writing, reviewing, or modifying any Haskell code in the NeoHaskell project. Triggers on 'NeoHaskell style', 'NeoHaskell conventions', 'how to write NeoHaskell', '
347SKILL.mdUpdated Jul 9, 2026
neohaskell/docs/archive/2026-07-ai-artifacts/claude-skills/neohaskell-security-review
development
VerifiedTrustedCommunity
> **ARCHIVAL KNOWLEDGE — DO NOT USE OR REFERENCE.** > Superseded by `codemap/` + root `AGENTS.md`. Scheduled for deletion once the pipeline is verified (Phase 6). > Manifest: `docs/archive/2026-07-ai-artifacts/MANIFEST.md` --- name: neohaskell-security-review description: Security & Code Quality review for NeoHaskell. Use when reviewing code changes, PRs, or architectural decisions for security implications. Evaluates OWASP, NIST, EU compliance. Handles pipeline phases 2 (ADR review) and 10 (im
347SKILL.mdUpdated Jul 9, 2026
neohaskell/docs/archive/2026-07-ai-artifacts/claude-skills/neohaskell-qa-designer
development
VerifiedTrustedCommunity
> **ARCHIVAL KNOWLEDGE — DO NOT USE OR REFERENCE.** > Superseded by `codemap/` + root `AGENTS.md`. Scheduled for deletion once the pipeline is verified (Phase 6). > Manifest: `docs/archive/2026-07-ai-artifacts/MANIFEST.md` --- name: neohaskell-qa-designer description: Testing QA Designer for NeoHaskell. Designs comprehensive test specifications with exhaustive edge cases, boundary conditions, and happy paths BEFORE implementation. Handles pipeline phase 6 (Test Spec Design). Outside-in TDD meth
347SKILL.mdUpdated Jul 9, 2026
neohaskell/docs/archive/2026-07-ai-artifacts/claude-skills/neohaskell-performance-review
development
VerifiedTrustedCommunity
> **ARCHIVAL KNOWLEDGE — DO NOT USE OR REFERENCE.** > Superseded by `codemap/` + root `AGENTS.md`. Scheduled for deletion once the pipeline is verified (Phase 6). > Manifest: `docs/archive/2026-07-ai-artifacts/MANIFEST.md` --- name: neohaskell-performance-review description: Performance review for NeoHaskell targeting 50k req/s throughput. Use when reviewing code for performance implications, INLINE pragmas, strictness, and allocation patterns. Handles pipeline phases 3 (ADR review) and 11 (imp
347SKILL.mdUpdated Jul 9, 2026