code-review-and-quality
78从五个质量维度审查代码
代码变更可能隐藏正确性、安全性、架构、可读性和性能问题。此技能采用结构化审查流程,并提供按优先级排列、可执行的反馈。
Improve Application Performance with Evidence
Performance problems are difficult to diagnose when teams optimize from assumptions. This skill provides a measurement-first workflow for finding bottlenecks, testing fixes, and preventing regressions.
将此请求复制给你的智能体,其中包含权威 Skill 页面和清单。
Review the Skillstore skill "performance-optimization" from https://skillstore.io/skills/addyosmani-performance-optimization.md and its manifest at https://skillstore.io/api/skills/addyosmani-performance-optimization/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智能体仍应展示其计划,并按安全策略请求必要确认。
当 AI Agent、爬虫或脚本需要干净上下文,而不是读取完整页面时,请使用这些链接。
正在使用“performance-optimization”。 The page has LCP of 4.2 seconds, a 1.8 MB JavaScript bundle, and large hero images.
预期结果:
正在使用“performance-optimization”。 An API loads tasks and fetches each task owner separately.
预期结果:
This is an N+1 query pattern. Fetch tasks with their owners in one query, then compare query count and p95 latency before and after.
正在使用“performance-optimization”。 A cache serves user profiles by profile ID, but the response includes tenant-specific permissions.
预期结果:
The cache key omits a response input. Include tenant and permission context, or avoid shared caching when authorization data must remain isolated.
All 55 static findings were reviewed against SKILL.md. They are false positives caused by documentation examples, Markdown syntax, a relative reference link, and fixed diagnostic SQL; no malicious behavior or prompt injection was found.
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据,不判断该 Skill 是否安全。
https://skillstore.io/skills/addyosmani-performance-optimization/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/addyosmani-performance-optimization?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/addyosmani-performance-optimization?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/addyosmani-performance-optimization/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/addyosmani-performance-optimization.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>addyosmani. (2026). performance-optimization security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/addyosmani-performance-optimization/audits/2@techreport{addyosmani-addyosmani-performance-optimization-2026,
author = {addyosmani},
title = {performance-optimization security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/addyosmani-performance-optimization/audits/2},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "performance-optimization security audit report (audit version 2)"
version: "unspecified"
type: report
authors:
- name: "addyosmani"
date-released: "2026-09-19"
url: "https://skillstore.io/skills/addyosmani-performance-optimization/audits/2"
identifiers:
- type: other
value: "skillstore:addyosmani-performance-optimization:audit:2"
description: "Skillstore immutable audit report identifier"
每位作者的技能都保持为独立的可安装项。推荐变体按 Skillstore 证据排序。
为什么此变体排名第一
ariegoldkin-performance-optimization
2026-09-09
addyosmani-performance-optimization
2026-09-22
supercent-io-performance-optimization
2026-09-09
Use measured browser data to identify bundle, rendering, image, interaction, or server-response bottlenecks.
Review query plans, indexes, pagination, N+1 patterns, and connection pools before changing backend code.
Create performance budgets and monitoring checks that verify improvements and catch later regressions.
My application feels slow. Ask for the minimum data needed, then identify the first measurements I should collect.
Review these LCP, INP, CLS, bundle, and network results. Identify the most likely bottleneck and propose one testable fix.
Analyze this query and EXPLAIN ANALYZE output. Explain the bottleneck, evaluate index options, and state the measurement needed after the change.
Design a controlled performance experiment for this suspected bottleneck. Define the baseline, one change, success threshold, variance check, rollback rule, and regression guard.
作者
addyosmani许可证
MIT
Skillstore 修订
r2
版本提示
作者未声明版本。
引用
5d5054f8a23586f9b500fece1cb613a9dffc787b
维护新鲜度
2026/9/19
使用量
1 次下载 · 0 次浏览
文件结构
📄 SKILL.md
从五个质量维度审查代码
代码变更可能隐藏正确性、安全性、架构、可读性和性能问题。此技能采用结构化审查流程,并提供按优先级排列、可执行的反馈。
Clarify User Intent Before You Build
Underspecified requests cause teams to build the wrong outcome and discover misalignment late. This skill runs a focused, one-question interview that turns ambiguity into confirmed intent.
Plan Work Into Verifiable Tasks
Large or vague software work can hide dependencies, missing acceptance criteria, and verification gaps. This skill converts a specification into ordered task slices with checkpoints, scope guidance, and clear completion conditions.
Document Decisions and Architecture Clearly
Teams lose context when important technical decisions remain in chat, code comments, or individual memory. This skill turns architectural reasoning, API guidance, project instructions, and release changes into structured documentation.
Build Accessible, Production-Ready Frontends
Frontend work can become inconsistent, inaccessible, or difficult to maintain. This skill guides component architecture, responsive layouts, state handling, and polished user experiences.
Harden Applications Against Security Risks
Security reviews can miss trust boundaries and unsafe data flows. This skill supplies threat-modeling prompts, OWASP patterns, and practical review checklists.
审查代码的安全性和质量
由 AutumnsGrove
手动代码审查可能会遗漏安全、性能和测试问题。此技能为 Claude、Codex 和 Claude Code 提供带有检查清单和辅助扫描指导的结构化审查工作流。
Build Interactive Three.js Scenes
由 freshtechbro
Building browser-based 3D scenes requires coordinating rendering, assets, interaction, and performance. This skill provides Three.js examples, reference guides, and a WebGL starter to support implementation.
提升 Vue 3 代码质量
由 vuejs-ai
Vue 项目常常会随着时间积累响应式、组件和性能方面的问题。此技能为更安全的模式和更清晰的代码提供有针对性的 Vue 3 指导。
使用性能剖析优化 Go 性能
由 89jobrien
Go 服务在缺少明确证据的情况下可能变得缓慢或占用大量内存。此技能将指导你进行性能剖析、分配分析、并发调优以及基于基准测试的优化。
构建更好的 SwiftUI 功能
由 avdlee
SwiftUI 项目可能会积累已弃用的 API、脆弱的状态和缓慢的视图更新。此技能为现代、可维护的 SwiftUI 代码提供聚焦指导。
构建可用于生产的前端功能
由 davila7
前端团队需要在各项目中获得一致的 React 和 Next.js 指导。此技能提供用于前端分析的参考工作流、质量实践和辅助脚本。