Code & Engineering

React Performance Review

Reviews pasted React and Next.js App Router code for five performance mistakes that pass every test and then make pages slow, and lists only those, one line each with a fixed code, the place, why it costs time and the fix - or exactly No findings. It catches independent awaits written one after another so the page waits for their sum, an effect that copies something derivable during render into state, a use client mark placed on a whole page when only a small leaf needs interactivity, a heavy library imported at the top of a client file though it is used only after a click, and a new object, array or function passed every render to a memo child or an effect dependency. It leaves out the safe look-alikes: a second await that needs the first result, an effect that syncs with an outside system, and use client on a small button. Use to review React or Next.js code before release, to find why a page ships too much JavaScript or renders twice, or to gate a pull request that touches components.

React Performance Review is a tested SKILL.md that reviews pasted React and Next.js App Router code for five performance mistakes that pass every test and then make pages slow, and lists only those, one line each with a fixed code, the place, why it costs time and the fix - or exactly No findings; an agent buys it once for $0.01 over x402.

Tested 2026-10-29No code, no hidden instructionsv1.0.0 · 8.2 KB · perpetual license

Not for

Caching and revalidation, layout and styling, measured timings or bundle sizes, and files that are imported but not pasted. It reads pasted React and Next.js code and judges only what is written in it.

Tested, honestly

Tested 2026-10-29 with a strong and a weak model.

SonnetStrong model, claude-sonnet-5-5
Right on all 3 cases, read by hand. On the dashboard page it named the three independent awaits as one waterfall and added that the posts call must still follow the user call, and it gave the PDF libraries imported at the top of the export button as the heavy eager import, without flagging the small client button. On the guide page it found the client mark on the whole page that drags react-markdown to the browser and the effect that copies the filtered list into state, and left out the WebSocket effect. On the clean orders page it answered exactly No findings.
HaikuWeak model, claude-haiku-5-5
Right on all 3 cases, read by hand. It gave the same pairs of findings as Sonnet on the dashboard and on the guide page, with the same safe look-alikes left out, and answered exactly No findings on the clean orders page. One of its lines on the dashboard case came out indented by four spaces, which the checks accept.

Full test summary

Example

Our own test text, before and after the skill ran. Excerpts only.

English · claude-sonnet-5-5

Before

// app/guides/setup/page.tsx 'use client'; import { useState } from 'react'; import ReactMarkdown from 'react-markdown'; import remarkGfm from 'remark-gfm'; import { guideMarkdown } from '@/content/setup-guide'; export default function SetupGuidePage() { const [helpful, setHelpful] = useState<boolean | null>(null); return ( <article> <h1>Setup guide</h1>…

After

CLIENT-BOUNDARY-HIGH — app/guides/setup/page.tsx, `'use client'` on SetupGuidePage — only the helpful/not-helpful buttons need state, yet react-markdown and remark-gfm and the guide text are sent to the browser — keep the page a server component and move the feedback buttons into a small client component…

What is in the file

  • The answer
  • The codes
  • How to read the code
  • Rules
  • Work in this order
  • Short example

Languages

English. Tried in: English.

License

Perpetual, non-exclusive; use and modify for yourself incl. paid work; no resale or republishing. Holder: Georgi Kalchev, aiskills402.com. Full terms.

Versions

Current version 1.0.0, updated 2026-10-30. Whoever bought an earlier version gets new ones free through the same re-download token.

  1. v1.0.0 · 2026-10-30

    First release, written in the light-test batch of 29 October 2026 (three cases, price $0.01). The idea is ours; no foreign skill was opened, facts come from the public React and Next.js documentation (see notes/ideas.md). Output: one line per finding with a fixed code, or exactly `No findings.`

    Test: three cases written by hand (two planted, each with a safe look-alike, one clean control), one run on Claude Sonnet and one on Claude Haiku, no run without the skill, no iteration on the skill text after the runs. `test/control.mjs` shows that the checks pass on the ideal answers and fail on realistic wrong ones. See `test-summary.json` for the verdicts read by hand.

FAQ

Awaits: when does a second one stay unlisted?

When it needs a value from the first result, such as an id or a token. That call has to wait, so only calls independent of each other are reported as a waterfall; the skill suggests starting those together and awaiting them with Promise.all, and leaves the dependent call alone.

Why is use client on a small button left alone?

Because that component is interactive as a whole, so the mark is where it belongs. The skill reports the mark only when it sits on a page or another large component while a small part needs state, since the file's imports then travel to the browser with it.

What about the React Compiler?

The documentation says the compiler handles memoization, so when the paste shows it is on, the skill does not report a new object or function handed to a memo child. Without that sign in the paste, the code is reported with a fix that moves the value out or wraps it.

What was it checked against?

Three pages: a dashboard with independent awaits and a heavy PDF library, a guide with the client mark on the whole page and a derived-state effect, and a clean orders page. Each got one reply from Sonnet and one from Haiku, and all six were read by hand for the summary.

Read more

Share

Read this page as Markdown: /skills/react-performance-review.md.

More in Code & Engineering

  • Remotion Code Review

    Code & Engineering

    SKILL.md · v1.0.0 · 7.9 KB

    Reviews pasted Remotion code (React video compositions) for the five mistakes that make a render differ from the preview or come out with missing frames, and lists only those, one line each with a fixed code, the place, why it breaks the render and the fix - or exactly No findings. It catches motion that is not driven by the frame number (CSS transitions and keyframes, timers, requestAnimationFrame, a counter held in state), Math.random in a component instead of the seeded random function, plain img, video, audio and iframe tags that the render does not wait for, data fetched in an effect with no render delay and no calculateMetadata, and a file from the public folder referenced by a bare path instead of staticFile. It leaves out safe look-alikes: clamped interpolate, seeded random, Math.random in a Node script. Use to review a Remotion composition before rendering, to debug flicker or a video that differs between renders, or to gate a pull request that edits a video project.

    $0.01once

    • x402
    • USDC
    • Base
    Get skill

    Tested with Sonnet and Haiku, 29 Oct 2026

  • Postgres or MySQL SQL to SQLite and D1

    Code & Engineering

    SKILL.md · v1.0.2 · 13.9 KB

    Converts PostgreSQL or MySQL schema statements, migrations and queries into SQLite that Cloudflare D1 and Turso run, so the converted version behaves like the original and not only parses. Knows the conversions that run without an error and then go wrong - a key written as BIGSERIAL or INT AUTO_INCREMENT that SQLite stores as NULL, a custom enum type or an inline enum that stops checking anything, a default now() or gen_random_uuid() that SQLite rejects, a unique email that was case-insensitive in MySQL, ON UPDATE CURRENT_TIMESTAMP that needs a trigger, a foreign key added later with ALTER TABLE, a schema prefix, DISTINCT ON, ILIKE, double-colon casts, date_trunc, interval arithmetic, DATEDIFF, GROUP_CONCAT with SEPARATOR, MySQL division that keeps the fraction, ON DUPLICATE KEY UPDATE, JSON operators. Answers with the SQLite SQL only, and says CANNOT CONVERT when part of the input has no equivalent in SQLite (a procedural function, row level security, notifications, a stored procedure) instead of dropping it. Use when asked to port, convert or migrate Postgres or MySQL SQL to SQLite, D1 or Turso.

    $0.01once

    • x402
    • USDC
    • Base
    Get skill

    Tested with Sonnet and Haiku, 9 Oct 2026

  • Flaky Test Review

    Code & Engineering

    SKILL.md · v1.0.0 · 5.7 KB

    Reviews ONE test file for the five causes that make a test pass on one run and fail on the next, and lists only those, one line each with a fixed code, the test, why it flips and the fix - or exactly No findings. It catches a fixed sleep used to wait for background work, an expectation tied to today's date or the current time, tests that share state and only pass in one order, random values with no fixed seed, and a call to a real network address. It leaves out the safe look-alikes, such as a fake clock set before the call, a random generator built from a fixed seed, a mocked network module and fake timers moved by hand. Use to find why a test fails once in a while in CI, to review a new test file before merging, or to harden a suite that people re-run until it goes green.

    $0.01once

    • x402
    • USDC
    • Base
    Get skill

    Tested with Sonnet and Haiku, 26 Oct 2026

  • CSP Header Review

    Code & Engineering

    SKILL.md · v1.0.0 · 6.0 KB

    Reviews ONE Content-Security-Policy header, with any note pasted beside it, and lists only the gaps that let injected script run or let the page be framed, one line each with a fixed code, the directive, why it hurts and the fix - or exactly No findings. It catches unsafe-eval or unsafe-inline in the script directive, a star, a data source or a bare scheme as a script source, a policy with neither object-src nor a default-src, a missing base-uri, a missing frame-ancestors, and a report-only header that the note describes as blocking. It leaves out the safe look-alikes, such as unsafe-inline in style-src only, unsafe-inline beside a nonce, a nonce with strict-dynamic, and a data source for images. Use to review a CSP before rollout, to audit the headers of a site, or to check a policy copied from a tutorial.

    $0.01once

    • x402
    • USDC
    • Base
    Get skill

    Tested with Sonnet and Haiku, 26 Oct 2026