performance-audit
This skill enables comprehensive performance audits for web applications, identifying optimization opportunities and enhancing user experience.
Install this skill
Security score
The performance-audit skill was audited on Feb 28, 2026 and we found 21 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 470 | height: `${virtualizer.getTotalSize()}px`, |
Template literal with variable interpolation in command context
| 482 | transform: `translateY(${virtualRow.start}px)`, |
Template literal with variable interpolation in command context
| 523 | if (!userRes.ok) throw new Error(`Failed to fetch user: ${userRes.status}`); |
Template literal with variable interpolation in command context
| 526 | const postsRes = await fetch(`/api/posts?userId=${user.id}`); |
Template literal with variable interpolation in command context
| 527 | if (!postsRes.ok) throw new Error(`Failed to fetch posts: ${postsRes.status}`); |
Template literal with variable interpolation in command context
| 530 | const commentsRes = await fetch(`/api/comments?userId=${user.id}`); |
Template literal with variable interpolation in command context
| 531 | if (!commentsRes.ok) throw new Error(`Failed to fetch comments: ${commentsRes.status}`); |
Template literal with variable interpolation in command context
| 542 | fetch(`/api/user/${userId}`).then(async r => { |
Template literal with variable interpolation in command context
| 543 | if (!r.ok) throw new Error(`Failed to fetch user: ${r.status}`); |
Template literal with variable interpolation in command context
| 546 | fetch(`/api/posts?userId=${userId}`).then(async r => { |
Template literal with variable interpolation in command context
| 547 | if (!r.ok) throw new Error(`Failed to fetch posts: ${r.status}`); |
Template literal with variable interpolation in command context
| 550 | fetch(`/api/comments?userId=${userId}`).then(async r => { |
Template literal with variable interpolation in command context
| 551 | if (!r.ok) throw new Error(`Failed to fetch comments: ${r.status}`); |
Template literal with variable interpolation in command context
| 564 | const response = await fetch(`/api/dashboard?userId=${userId}`); |
Template literal with variable interpolation in command context
| 566 | throw new Error(`Failed to fetch dashboard: ${response.status}`); |
Fetch to external URL
| 522 | const userRes = await fetch('/api/user'); |
Fetch to external URL
| 749 | fetch('/api/data') |
Fetch to external URL
| 762 | fetch('/api/data', { signal: controller.signal }) |
Access to .env file
| 312 | glob: ".env*" |
Access to .env file
| 326 | url: process.env.DATABASE_URL, |
Access to .env file
| 329 | log: process.env.NODE_ENV === 'development' ? ['query', 'error', 'warn'] : ['error'], |
Install this skill with one command
/learn @mgd34msu/performance-audit