shipshitdev/workspace-performance-audit
bundles/session/skills/workspace-performance-audit/SKILL.md
Orchestrates comprehensive performance audits across full-stack monorepos. Coordinates performance-expert, design-consistency-auditor, accessibility, security-expert, and qa-reviewer skills to audit frontend, backend, database, browser extensions, and shared packages. Use when asked for a full workspace performance review, monorepo audit, or to identify bottlenecks across frontend, backend, and extensions.
$ install --global
skillsauthnpx skillsauth add shipshitdev/library workspace-performance-auditInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 1, 2026, 5:19 AM111.7s3 files scanned
SKILL.md
- name:
- workspace-performance-audit
- description:
- Orchestrates comprehensive performance audits across full-stack monorepos. Coordinates performance-expert, design-consistency-auditor, accessibility, security-expert, and qa-reviewer skills to audit frontend, backend, database, browser extensions, and shared packages. Use when asked for a full workspace performance review, monorepo audit, or to identify bottlenecks across frontend, backend, and extensions.
- disable-model-invocation:
- true
- version:
- 1.0.0
- tags:
- performance, audit, monorepo
Workspace Performance Audit
Contract
Inputs:
- Monorepo root path (defaults to current working directory)
- Optional: target domain(s) to focus on (frontend, backend, database, extension)
- Optional: audit mode (quick or full)
Outputs:
- Consolidated performance audit report
- Prioritized recommendations with severity ratings
Creates/Modifies:
.agents/memory/performance-audit-YYYY-MM-DD.md— writes the audit report
External Side Effects:
- None. Read-only analysis only; does not deploy, modify, or install anything.
Confirmation Required:
- Before writing the output report if the target path is outside the current workspace
Delegates To:
performance-expertfor metrics and optimizationdesign-consistency-auditorfor UI/UX consistencyqa-reviewerfor validation and prioritization
Skills Orchestrated
| Skill | Focus Area | Phase |
|-------|------------|-------|
| performance-expert | Performance metrics & optimization | 1-4 |
| design-consistency-auditor | UI/UX consistency & design debt | 1 |
| accessibility | WCAG 2.1 AA compliance | 1 |
| security-expert | Security validation | 2 |
| qa-reviewer | Validation & prioritization | 5 |
Orchestration Flow
Phase 0: Workspace Discovery
→ Identify apps, packages, tech stacks
Phase 1: Frontend Audit (Next.js)
→ Core Web Vitals, Bundle Analysis, Design, A11y
Phase 2: Backend Audit (NestJS)
→ API Response Times, N+1 Queries, Security
Phase 3: Database Audit (MongoDB)
→ Query Performance, Index Analysis
Phase 4: Extension & Packages
→ Bundle Sizes, Memory, Dependencies
Phase 5: Consolidation
→ Aggregate, Score, Prioritize, Report
Key Metrics by Domain
| Domain | Key Metrics | Targets | |--------|-------------|---------| | Frontend | LCP, FID, CLS | <2.5s, <100ms, <0.1 | | Backend | p50, p95 response | <100ms, <200ms | | Database | Query p95, Index hit | <50ms, >95% | | Extension | Content script size | <50KB |
Usage Modes
Quick Audit: Essential checks only → 1-page summary Full Audit: All phases → Complete report Domain-Specific: Single domain focus
For detailed phase execution, metric collection commands, report templates, and example interactions: load ${CLAUDE_SKILL_DIR}/references/full-guide.md when starting a full audit or when a specific phase requires detailed guidance.
Related Skills
shipshitdev/weekly-review
development
VerifiedTrustedCommunity
Coordinates a weekly engineering review of board accuracy, recent code changes, operational health, and scoped cleanup. Use for a recurring repository health review or a review of the last several days.
35SKILL.mdUpdated Sep 6, 2026
shipshitdev/project-board
testing
VerifiedTrustedCommunity
Audits project board configuration and prepares explicitly requested setup, copy, or normalization changes while preserving the existing workflow and provider boundaries. Use when inspecting a board's fields, columns, scope, or configuration.
35SKILL.mdUpdated Sep 6, 2026
shipshitdev/board-sync
testing
VerifiedTrustedCommunity
Reconciles a project board with current work and delivery evidence, reports incomplete coverage and metadata gaps, and applies only approved provider-supported field changes. Use when auditing board drift, reviewing blocked work, or assessing upcoming delivery.
35SKILL.mdUpdated Sep 6, 2026
shipshitdev/how
development
VerifiedTrustedCommunity
Walk through how a subsystem works. Use for "how does X work", code walkthroughs before changing something, and placement or ownership questions. Explains architecture, runtime flow, and onboarding mental models. Can critique architecture. Use why for motivation.
35SKILL.mdUpdated Aug 31, 2026