Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Perf

ASecurity

Use when the user asks to improve performance, find bottlenecks, optimize the backend, or speed something up. Also trigger on "/foreman:perf" or "/perf".

2 stars
0 votes
0 copies
0 views
Added 9/22/2026
developmentgodatabasebackendperformance

Works with

cli

Security Analysis

A100/100

Scanned 9/24/2026

Install to Claude Code

$npx -y skills add JustinK33/foreman --skill perf --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Perf?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Perf
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/justink33-perf/badge)](https://www.skillsdirectory.com/skills/justink33-perf)

More formats (shields.io, HTML) on the badges page.

Download with Pro
Files
SKILL.md
---
name: perf
description: Use when the user asks to improve performance, find bottlenecks, optimize the backend, or speed something up. Also trigger on "/foreman:perf" or "/perf".
argument-hint: "[endpoint, function, or path]"
---

# Performance Review

Measure before you change anything, and change the thing that's actually slow, not the thing that's easiest to rewrite.

## What to look at

`$ARGUMENTS`, when that is not empty. It is usually an endpoint (`GET /reports`), a function name, or a
path. Find the code that serves it before theorizing about it.

With no argument, ask what is slow. "Optimize this codebase" has no measurable answer, and guessing at
one is how you spend a day on a function called once at startup.

## Method

1. **Find the bottleneck, don't guess it.** Look for profiling data, logs, query timings, or APM traces first. If none exist, say so and either ask for a profile or reason from the code's structure (loop nesting, query patterns) while being explicit that this is an estimate, not a measurement.
2. **Prioritize by impact x frequency**, not by what looks inelegant. A slightly ugly function called once at startup matters less than a mediocre one called per-request.
3. **Fix, then re-measure.** A performance fix without a before/after number is a guess that happened to compile.

## Backend patterns to check, roughly by how often they're the real cause

1. **N+1 queries** - a loop that issues one query per iteration instead of one batched query (`SELECT` in a loop over an ORM relationship is the classic case). Usually the single highest-impact fix available.
2. **Missing or wrong indexes** - slow queries on columns used in `WHERE`, `JOIN`, or `ORDER BY` without a supporting index; also indexes that exist but aren't used because of a function wrapped around the column or a type mismatch.
3. **Unbounded result sets** - loading an entire table into memory instead of paginating, streaming, or filtering at the database layer.
4. **Synchronous I/O blocking a request path that doesn't need it** - sequential awaited calls to independent services instead of concurrent ones; blocking calls on an async runtime's event loop.
5. **Missing caching for expensive, repeatable work** - the same computation or query re-run per request when the result is stable for some useful window. Also check the inverse: caching that's gone stale or is invalidated incorrectly, which is worse than no cache.
6. **Algorithmic complexity** - an O(n^2) pass over data that's routinely large, where a hash map or a single sorted pass gets it to O(n) or O(n log n). Only worth flagging where n is actually large in practice.
7. **Connection/resource churn** - opening a new DB connection, HTTP client, or thread pool per request instead of reusing a pool.
8. **Serialization overhead** - large payloads serialized/deserialized in full when only a subset of fields is needed downstream.

## Design-level changes (bigger lever, bigger cost, mention with the tradeoff attached)

- Read replicas or caching layers for read-heavy workloads.
- Moving work off the request path into a background job/queue when the caller doesn't need the result synchronously.
- Denormalizing a hot-path read to avoid an expensive join, at the cost of write complexity and eventual-consistency risk, state that cost explicitly.
- Batching/debouncing high-frequency writes.

Always name what a design change costs (consistency, complexity, operational surface) alongside what it buys. A recommendation without the tradeoff isn't a complete recommendation.

## What not to do

- Don't micro-optimize code that isn't on a hot path; that's wasted effort and adds noise to the diff.
- Don't recommend a caching layer, queue, or read replica as a first move if the actual problem is a missing index or an N+1 query, fix the cheap thing first.
- Don't sacrifice correctness or readability for a speedup that hasn't been shown to matter. The fastest code is often also the simplest, but not always: when speed and clarity genuinely trade off, say so explicitly instead of quietly picking one.

Attribution

JustinK33JustinK33
View sourceMore from JustinK33 →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Browser Extension Developer

Use this skill when developing or maintaining browser extension code in the `browser/` directory, including Chrome/Firefox/Edge compatibility, content scripts, background scripts, or i18n updates.

284722 votes

Seo Optimizer

SEO optimization with keyword analysis, readability assessment, technical validation, content quality. Use for search rankings, blog posts, content audits, or encountering keyword density, readability scores, meta tags, schema markup errors.

2192 votes

Google Official Seo Guide

Official Google SEO guide covering search optimization, best practices, Search Console, crawling, indexing, and improving website search visibility based on official Google documentation

1862 votes

Tanstack Start

Build a full-stack TanStack Start app on Cloudflare Workers from scratch — SSR, file-based routing, server functions, D1+Drizzle, better-auth, Tailwind v4+shadcn/ui. Use whenever the user mentions TanStack Start, asks to scaffold a full-stack Cloudflare app with SSR, wants an SSR dashboard, or asks for a React 19 + Cloudflare Workers app with file-based routing and server functions — even if they don't name TanStack Start specifically. No template repo — Claude generates every file fresh per ...

9881 votes

Pentest

PTES-aligned adversarial security audit for backend, frontend, and mobile applications. Produces a CVSS-scored Hacker Report with verified PoCs and phased remediation.

5491 votes
View all in development →