← All skills
perf-audit
92 / 100 · Low risk
Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By b-open-io/prompts (GitHub) · security · 15 stars · scanned at commit f4b302a
Run local performance audits on a project without network calls. This skill should be used when the user says 'audit performance', 'check bundle size', 'find large images', 'check for heavy dependencies', 'run a perf audit', 'how big is my bundle', 'optimize images', 'find oversized assets', or before any performance optimization work. Also use when an agent needs baseline metrics before making changes. All scripts output structured JSON to stdout.
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a security skill.
Found in 4 places.
Show 1 more
Sends data to these websites: date-fns.org, day.js.org, github.com, lucide.dev, www.radix-ui.com
This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.
Found in 19 places.
Show 16 more
- modules/web-dev/skills/perf-audit/evals/benchmark.json, line 32
"text": "For each heavy dependency, a specific lighter alternative is named (not just 'use something lighter'). Examples: date-fns/dayjs for moment, lodash-es/n - modules/web-dev/skills/perf-audit/evals/benchmark.json, line 40
"reasoning": "Approximate bundle sizes are provided for all 5 identified packages (moment ~329KB, lodash ~71KB, jquery ~30KB, axios ~13KB, font-awesome ~400KB+) - modules/web-dev/skills/perf-audit/evals/benchmark.json, line 53
"output": "Here are the heavy dependencies that should be replaced:\n\n---\n\n### 1. `moment` (^2.29.4)\n**Why heavy:** ~232KB minified, includes all locale dat - modules/web-dev/skills/perf-audit/evals/benchmark.json, line 59
"text": "The response identifies all 6 heavy dependencies: moment, lodash, jquery, axios, @fortawesome/fontawesome-free (or font-awesome), and chart.js. All 6 m - modules/web-dev/skills/perf-audit/evals/benchmark.json, line 61
"reasoning": "The response identifies 5 of the 6 heavy dependencies (moment, lodash, jquery, axios, @fortawesome/fontawesome-free) but never mentions chart.js a - modules/web-dev/skills/perf-audit/evals/benchmark.json, line 65
"text": "For each heavy dependency, a specific lighter alternative is named (not just 'use something lighter'). Examples: date-fns/dayjs for moment, lodash-es/n - modules/web-dev/skills/perf-audit/evals/benchmark.json, line 67
"reasoning": "Specific alternatives are named for each identified dependency: date-fns for moment, lodash-es/native JS for lodash, delete/React+fetch for jquery - modules/web-dev/skills/perf-audit/evals/benchmark.json, line 73
"reasoning": "Approximate sizes are provided for all 5 identified packages: moment ~232KB, lodash ~72KB gzipped, jquery ~88KB gzipped, axios ~14KB gzipped, font - modules/web-dev/skills/perf-audit/evals/benchmark.json, line 90
"output": "---\n\n**Health Score: 80 / 100**\n\n### What's dragging it down (-20 points)\n\n**Heavy dependencies (major drag)** — 6 out of 9 production deps are - modules/web-dev/skills/perf-audit/evals/benchmark.json, line 110
"reasoning": "moment, lodash, jquery, axios, chart.js, and fontawesome are explicitly identified as heavy dependencies dragging down the score." - modules/web-dev/skills/perf-audit/evals/benchmark.json, line 117
"output": "Here's the performance health score:\n\n---\n\n## Performance Health Score: **80 / 100**\n\nThe score is dragged down entirely by dependency bloat — - modules/web-dev/skills/perf-audit/evals/benchmark.json, line 137
"reasoning": "Heavy dependencies moment, lodash, jquery, axios, chart.js, and @fortawesome are all explicitly identified as factors dragging down the score." - modules/web-dev/skills/perf-audit/evals/evals.json, line 7
"expected_output": "The skill's dep-audit.sh has a curated list of 21+ known-heavy packages with specific alternatives. It should identify moment, lodash, jquer - modules/web-dev/skills/perf-audit/evals/evals.json, line 12
"text": "The response identifies all 6 heavy dependencies: moment, lodash, jquery, axios, @fortawesome/fontawesome-free (or font-awesome), and chart.js. All 6 m - modules/web-dev/skills/perf-audit/evals/evals.json, line 17
"text": "For each heavy dependency, a specific lighter alternative is named (not just 'use something lighter'). Examples: date-fns/dayjs for moment, lodash-es/n - modules/web-dev/skills/perf-audit/scripts/dep-audit.sh, line 38
"axios|fetch or ky|fetch is built-in; ky is 3KB"
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'perf-audit' ] || [ -L ~/.agents/skills/'perf-audit' ]; then echo 'A skill folder named perf-audit already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/b-open-io/prompts' "$d" && git -C "$d" checkout --quiet 'f4b302aadb0c99023b03e1f1b38ffed3697fbedf' -- 'modules/web-dev/skills/perf-audit' && mkdir -p ~/.agents/skills && cp -R "$d"/'modules/web-dev/skills/perf-audit' ~/.agents/skills/'perf-audit' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'perf-audit' ~/.claude/skills/'perf-audit' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for b-open-io/prompts shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/b-open-io/prompts/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | f4b302a | 92 |
| 2026-11-06 | f4b302a | 92 |