📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills performance-testing-review-ai-review
📦
performance-testing-review-ai-review
Content revision r1 Safe ⚙️ External commands🌐 Network access📁 Filesystem access🔑 Env variables
Automate AI Code Review Workflows
Manual code reviews can miss security, performance, and architecture issues under deadline pressure. This skill guides AI-assisted reviews using static analysis, LLM prompts, CI checks, and quality gates.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "performance-testing-review-ai-review" from https://skillstore.io/skills/sickn33-performance-testing-review-ai-review.md and its manifest at https://skillstore.io/api/skills/sickn33-performance-testing-review-ai-review/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "performance-testing-review-ai-review". Small API change with database reads inside a loop.
Expected outcome:
The review flags a high performance risk, explains the N+1 query pattern, and recommends batch loading or eager loading.
Using "performance-testing-review-ai-review". Pull request touching login, session handling, and token validation.
Expected outcome:
The review prioritizes authentication bypass, weak token validation, session fixation, rate limiting, and missing security tests.
Using "performance-testing-review-ai-review". Large refactor affecting many files across multiple services.
Expected outcome:
The review recommends shallow automated checks first, then human review for service boundaries, API compatibility, and rollout risk.
Security Audit
Safev4 • 7/7/2026 Open versioned report
The static alerts are false positives from Markdown examples, code fences, and conventional CI review snippets. I found no evidence of prompt injection, secret exfiltration, malicious network behavior, or unsafe filesystem access in SKILL.md.
1
Files scanned
451
Lines analyzed
0
Review items
0
False positives ignored
Risk Factors
⚙️ External commands (30)
SKILL.md:367 SKILL.md:370 SKILL.md:25 SKILL.md:54-81 SKILL.md:81-90 SKILL.md:90-114 SKILL.md:114-128 SKILL.md:128-161 SKILL.md:161-169 SKILL.md:169-185 SKILL.md:185-188 SKILL.md:188-195 SKILL.md:195-212 SKILL.md:212-216 SKILL.md:216-232 SKILL.md:232-239 SKILL.md:239-252 SKILL.md:252-257 SKILL.md:257-272 SKILL.md:274-275 SKILL.md:277 SKILL.md:282-286 SKILL.md:286-291 SKILL.md:291-339 SKILL.md:339-343 SKILL.md:343-398 SKILL.md:398-399 SKILL.md:399 SKILL.md:334 SKILL.md:291-339
🌐 Network access (1)
📁 Filesystem access (2)
🔑 Env variables (5)
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-performance-testing-review-ai-review/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-performance-testing-review-ai-review?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-performance-testing-review-ai-review?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-performance-testing-review-ai-review/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-performance-testing-review-ai-review.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). performance-testing-review-ai-review security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-performance-testing-review-ai-review/audits/4BibTeX citation
@techreport{sickn33-sickn33-performance-testing-review-ai-review-2026,
author = {sickn33},
title = {performance-testing-review-ai-review security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/sickn33-performance-testing-review-ai-review/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "performance-testing-review-ai-review security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/sickn33-performance-testing-review-ai-review/audits/4"
identifiers:
- type: other
value: "skillstore:sickn33-performance-testing-review-ai-review:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance
What You Can Build
Review high-risk pull requests
Use focused prompts and static analyzer context to inspect authentication, authorization, and data-access changes.
Design CI review gates
Create a pipeline plan that combines static analysis, AI review, review comments, and merge-blocking thresholds.
Standardize review quality
Define repeatable review categories, severity labels, and remediation expectations across engineering teams.
Try These Prompts
Basic pull request review
Review this pull request for security, performance, tests, and maintainability. Use clear severity labels and concrete fixes. Here is the diff: [paste diff].
Security-focused review
Analyze this security-sensitive change for access control, token handling, injection risks, and missing audit coverage. Include likely impact and remediation steps.
CI workflow planning
Design a CI code review workflow for this repository. Include static analysis tools, AI review inputs, secret handling, and merge quality gates.
Advanced multi-tool audit
Build a staged review plan for this service. Combine static analysis, dependency review, threat modeling, performance checks, and human approval points.
Best Practices
- Scope each review by change size, affected systems, and security sensitivity before deep analysis.
- Combine AI findings with static analyzer results and human review for final decisions.
- Keep credentials in CI secrets and restrict tokens to the minimum repository permissions.
Avoid
- Letting AI-generated findings block merges without human confirmation.
- Running broad scanners without excluding generated, vendor, or irrelevant files.
- Posting verbose review comments that lack line references, severity, or actionable fixes.
Frequently Asked Questions
Does this skill run analysis tools automatically?
No. It provides workflow guidance and examples. The user or agent must run configured tools in the target environment.
Can it replace human code reviewers?
No. It supports reviewers by organizing evidence, prompts, and checks. Human judgment remains required for merge decisions.
Which tools does it mention?
It discusses CodeQL, SonarQube, Semgrep, Snyk, Dependabot, GitGuardian, TruffleHog, GitHub Actions, Qodo, and LLM review tools.
Is it only for security review?
No. It also covers performance, architecture, maintainability, testing, scalability, and CI quality gates.
What inputs work best?
Use a pull request diff, project context, static analyzer results, architecture notes, and known risk areas.
Can Codex or Claude Code use it?
Yes. The skill declares support for Claude, Codex, and Claude Code workflows.
Developer Details
Author
sickn33License
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
816c62b2546ddb1c6a0453e7c781b5e095117819
Maintenance freshness
7/18/2026
Usage
10 downloads · 119 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-fullstack
82Build Fullstack Apps with Senior Patterns
Teams need consistent setup, architecture, and review guidance for modern web applications. This skill provides scaffolders, workflow references, and quality prompts for React, Next.js, Node.js, GraphQL, and PostgreSQL projects.
Coding & Development View
📦
senior-architect
81Design Scalable Software Architectures
Architecture decisions are hard to compare across web, mobile, backend, and cloud systems. This skill provides structured guides and local scaffold scripts for reports, dependency review, and trade-off documentation.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
structural-search
85Search Code by AST Structure
by 0xDarkMatter
Text searches miss semantic relationships and produce noisy matches. This skill uses ast-grep patterns to locate code structures and prepare focused refactors.
Coding & Development View
📦
testing
85Build Reliable Test Automation
by 89jobrien
Weak tests slow releases and hide regressions. This skill guides test strategy, TDD, automation, coverage review, and Playwright web checks.
Coding & Development View
📦
code-reviewer
83Review Code with Structured Quality Checks
by alirezarezvani
Code reviews can miss quality, security, and maintainability issues. This skill guides structured reviews with scripts, checklists, and report generation.
Coding & Development View
📦
analyzing-component-quality
82Evaluate Claude Code Component Quality
by C0ntr0lledCha0s
Claude Code components can be technically valid yet unclear, over-permissioned, or difficult to invoke. This skill scores five quality dimensions and recommends specific improvements.
Coding & Development View
📦
senior-backend
81Build Scalable Backend Services
by davila7
Backend teams need structured guidance for APIs, migrations, security, and performance. This skill provides references and helper scripts for planning, scaffolding, and reviewing backend work.
Coding & Development View
📦
testing-patterns
81Plan Reliable Tests Across Your Codebase
by 0xDarkMatter
This skill helps teams choose test strategies, mocks, data fixtures, coverage gates, and CI patterns without mixing test scopes. It gives Claude, Codex, and Claude Code structured guidance for unit, integration, end-to-end, TDD, and pipeline testing.
Coding & Development View