shipshitdev/workspace-performance-audit
bundles/session/skills/workspace-performance-audit/SKILL.md
Orchestrates comprehensive performance audits across full-stack monorepos. Coordinates performance-expert, design-consistency-auditor, accessibility, security-expert, and qa-reviewer skills to audit frontend, backend, database, browser extensions, and shared packages. Use when asked for a full workspace performance review, monorepo audit, or to identify bottlenecks across frontend, backend, and extensions.
$ install --global
skillsauthnpx skillsauth add shipshitdev/library workspace-performance-auditInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 1, 2026, 5:19 AM111.7s3 files scanned
SKILL.md
- name:
- workspace-performance-audit
- description:
- Orchestrates comprehensive performance audits across full-stack monorepos. Coordinates performance-expert, design-consistency-auditor, accessibility, security-expert, and qa-reviewer skills to audit frontend, backend, database, browser extensions, and shared packages. Use when asked for a full workspace performance review, monorepo audit, or to identify bottlenecks across frontend, backend, and extensions.
- disable-model-invocation:
- true
- version:
- 1.0.0
- tags:
- performance, audit, monorepo
Workspace Performance Audit
Contract
Inputs:
- Monorepo root path (defaults to current working directory)
- Optional: target domain(s) to focus on (frontend, backend, database, extension)
- Optional: audit mode (quick or full)
Outputs:
- Consolidated performance audit report
- Prioritized recommendations with severity ratings
Creates/Modifies:
.agents/memory/performance-audit-YYYY-MM-DD.md— writes the audit report
External Side Effects:
- None. Read-only analysis only; does not deploy, modify, or install anything.
Confirmation Required:
- Before writing the output report if the target path is outside the current workspace
Delegates To:
performance-expertfor metrics and optimizationdesign-consistency-auditorfor UI/UX consistencyqa-reviewerfor validation and prioritization
Skills Orchestrated
| Skill | Focus Area | Phase |
|-------|------------|-------|
| performance-expert | Performance metrics & optimization | 1-4 |
| design-consistency-auditor | UI/UX consistency & design debt | 1 |
| accessibility | WCAG 2.1 AA compliance | 1 |
| security-expert | Security validation | 2 |
| qa-reviewer | Validation & prioritization | 5 |
Orchestration Flow
Phase 0: Workspace Discovery
→ Identify apps, packages, tech stacks
Phase 1: Frontend Audit (Next.js)
→ Core Web Vitals, Bundle Analysis, Design, A11y
Phase 2: Backend Audit (NestJS)
→ API Response Times, N+1 Queries, Security
Phase 3: Database Audit (MongoDB)
→ Query Performance, Index Analysis
Phase 4: Extension & Packages
→ Bundle Sizes, Memory, Dependencies
Phase 5: Consolidation
→ Aggregate, Score, Prioritize, Report
Key Metrics by Domain
| Domain | Key Metrics | Targets | |--------|-------------|---------| | Frontend | LCP, FID, CLS | <2.5s, <100ms, <0.1 | | Backend | p50, p95 response | <100ms, <200ms | | Database | Query p95, Index hit | <50ms, >95% | | Extension | Content script size | <50KB |
Usage Modes
Quick Audit: Essential checks only → 1-page summary Full Audit: All phases → Complete report Domain-Specific: Single domain focus
For detailed phase execution, metric collection commands, report templates, and example interactions: load ${CLAUDE_SKILL_DIR}/references/full-guide.md when starting a full audit or when a specific phase requires detailed guidance.
Related Skills
shipshitdev/typescript-refactor
development
VerifiedTrustedCommunity
TypeScript refactoring and modernization guidelines from a principal specialist perspective. This skill should be used when refactoring, reviewing, or modernizing TypeScript code to ensure type safety, compiler performance, and idiomatic patterns. Triggers on tasks involving TypeScript type architecture, narrowing, generics, error handling, or migration to modern TypeScript features.
30SKILL.mdUpdated Jul 14, 2026
shipshitdev/typescript-expert
tools
VerifiedTrustedCommunity
Resolves TypeScript and JavaScript problems across type-level programming, performance, monorepo management, migration, and modern tooling. Invoke when diagnosing "type instantiation excessively deep" errors, migrating JS to TS, configuring strict tsconfig, debugging module resolution, or choosing between Biome/ESLint/Turborepo/Nx.
30SKILL.mdUpdated Jul 14, 2026
shipshitdev/turborepo
tools
VerifiedTrustedCommunity
Turborepo monorepo build system guidance. Triggers on: `turbo.json`, task pipelines, `dependsOn`, caching, remote cache, the `turbo` CLI, `--filter`, `--affected`, CI optimization, environment variables, internal packages, monorepo structure, and package boundaries. Use when the user configures tasks or workflows, creates packages, sets up a monorepo, shares code between apps, runs changed packages, debugs cache behavior, or works in an `apps/` plus `packages/` workspace.
30SKILL.mdUpdated Jul 14, 2026
shipshitdev/tailwind
tools
VerifiedTrustedCommunity
Provides Tailwind CSS v4 performance optimization and best practices guidelines. Triggers when writing, reviewing, or refactoring Tailwind CSS v4 code; when working with Tailwind configuration, @theme directive, utility classes, responsive design, dark mode, container queries, or CSS generation optimization.
30SKILL.mdUpdated Jul 14, 2026