js-bundle-audit

Stars4

Forks0

UpdatedJuly 18, 2026 at 15:25

Audit frontend build output for shipped-code waste — bundle size, dead code, missing code-splitting, hydration cost on content pages, duplicate dependencies, and polyfills for unsupported browsers. Use this skill whenever the user shares a build stats file (webpack/Vite/Rollup stats, source-map-explorer output), package.json + bundler config, or asks why the site's JavaScript is heavy or slow to load. Part of Lean Agentic AI Skills; emits lean-findings.json.

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Source

navveenb

navveenb/lean-agentic-ai-skills

View GitHub Repository View Creator Repositories

Download

Related occupationsSOC

Based on SOC occupation classification

Software DevelopersComputer and Mathematical Occupations·SOC 15-1252

File Explorer

3 files

SKILL.md

readonly

name

js-bundle-audit

description

JS Bundle Audit

Producer skill. Input: bundler stats/visualizer output, lockfile + config, or the built assets themselves. Output: lean-findings.json.

web-carbon-audit sees the served page; this skill sees the build that produced it. Shipped JavaScript is charged twice per visit — transfer (E, network) and execution (E, client CPU: parse/compile/run on every device, including the low-end ones).

Subject type: emit subject.type: "frontend-build" in findings.

Signatures

Monolithic bundles — one entry chunk carrying the whole app; routes/features not split. High. Evidence: chunk sizes from stats. Fix: route-level code-splitting, dynamic import() for below-the-fold features.
Dead and unused code shipped — exports bundled but never imported; entire component libraries for three components; moment.js with all locales. High. Fix: tree-shakeable imports (import { x }), sideEffects flags, locale/feature pruning; evidence from stats treemaps.
Duplicate dependencies — two versions of the same package via transitive pins; both lodash and lodash-es. Medium-high. Evidence: lockfile/stats. Fix: resolutions/dedupe.
Full hydration on content pages — fully-interactive framework runtime shipped to pages that are 95% static text. Medium-high (client CPU × every visitor). Fix: static generation, islands/partial hydration, or server components where the stack supports them; named trade-off: architecture change, effort high.
Legacy polyfills/transpilation for browsers nobody supports — ES5 output and core-js for a modern-browser audience. Medium. Fix: browserslist matched to actual analytics; dual modern/legacy builds only when the audience data demands it.
Heavy libraries for light jobs — full charting/date/utility libraries where a small alternative or native API serves. Medium; name the specific lighter path per case.
Source maps / dev artifacts in production — shipped .map files or unminified vendor chunks. Low-medium.
No compression/minification gaps — modern minifier not enabled, brotli absent on the asset pipeline (overlaps web-carbon-audit's transfer view; record here when the cause is the build).
Third-party SDK sprawl — analytics/support/AB-test SDKs each shipping their own runtime; loaded eagerly. Medium-high; fix: consolidate, defer, or facade.

Honesty rules

Byte sizes from stats are real — report before/after per recommendation where computable from the stats alone. Execution-cost claims stay directional ("less to parse and execute on every device") — measurement pointer: Lighthouse total blocking time / real-device profiling. Splitting adds request overhead — name it when recommending fine-grained chunks.

Cost signal (countable)

Cost driver: bytes served × visitors (CDN egress and client CPU time). Bundler stats give exact byte counts per chunk — quote them in cost_signal.observed; visitor multiplier belongs to the user's analytics.

Not this skill's job

Served-page concerns beyond the bundle (web-carbon-audit), CI time to build it (lean-ci-audit), CDN caching of the chunks (caching-strategy-designer).

More from this repository

same repository

agentic-loop-auditor

navveenb/lean-agentic-ai-skills

Audit agent frameworks and agentic workflows for token-burning loop pathologies — unbounded retries, excessive planning depth, tool-call thrashing, context snowballing, missing loop budgets and kill switches. Use this skill whenever the user shares agent configs or traces (LangChain/LangGraph, CrewAI, AutoGen, custom loops), complains an agent is slow or expensive, or is designing any autonomous/multi-step agent. Part of Lean Agentic AI Skills; emits lean-findings.json.

2026-07-184

ai-eval-efficiency-audit

navveenb/lean-agentic-ai-skills

Audit AI evaluation infrastructure for wasted compute — full benchmark suites re-run on unchanged cases, LLM-as-judge grading without caching, oversized judge models, redundant eval passes per commit, and missing result reuse. Use this skill whenever the user shares eval harness configs or CI eval steps, complains that evals are slow or expensive, mentions LLM-as-judge costs, or runs benchmark suites on every change. Part of Lean Agentic AI Skills; emits lean-findings.json.

2026-07-184

api-efficiency-audit

navveenb/lean-agentic-ai-skills

Audit API design for chattiness and over-fetching — REST endpoints requiring N calls per screen, GraphQL resolvers with N+1 fan-out, default-everything payloads, missing pagination and field selection, provider-side polling where webhooks serve, and uncompressed responses. Use this skill whenever the user shares API schemas (OpenAPI, GraphQL SDL), resolver code, endpoint designs, or asks why clients make too many calls or payloads are heavy. Part of Lean Agentic AI Skills; emits lean-findings.json.

2026-07-184

caching-strategy-designer

navveenb/lean-agentic-ai-skills

Design caching layers so work is done once, not per request — HTTP/CDN caching, application-level caches (Redis/Memcached), computed-result caching, and cache-invalidation strategy. Use this skill whenever the user wants to add caching, asks why the same work is recomputed, designs a read-heavy system, or an audit skill (db-efficiency-audit, web-carbon-audit) flags uncached repeated work. Part of Lean Agentic AI Skills; emits a cache design plus lean-findings.json.

2026-07-184

carbon-aware-scheduler

navveenb/lean-agentic-ai-skills

Design time-shifting of flexible workloads (batch jobs, CI, training, backups, crons) to hours and regions when grid electricity is cleanest, using carbon-intensity signals like Electricity Maps, WattTime, or the Carbon Aware SDK. Use this skill whenever the user mentions carbon-aware computing, scheduling flexible/deferrable jobs, demand shifting, running workloads when energy is clean, or asks how to reduce the carbon intensity (not just amount) of their compute. Part of Lean Agentic AI Skills; emits schedule designs plus lean-findings.json.

2026-07-184

carbon-budget-designer

navveenb/lean-agentic-ai-skills

Design per-feature and per-service efficiency budgets — page-weight budgets, token budgets per AI feature, query budgets per endpoint, GPU-hour budgets per training project — with owners, review checkpoints, and enforcement hooks. Use this skill whenever the user wants sustainability targets for teams, asks how to keep efficiency from regressing organizationally, mentions performance-budget-style governance for carbon/energy, or is setting engineering standards. Part of Lean Agentic AI Skills; an advisor emitting budget definitions plus lean-findings.json.

2026-07-184

name

js-bundle-audit

description

JS Bundle Audit

Producer skill. Input: bundler stats/visualizer output, lockfile + config, or the built assets themselves. Output: lean-findings.json.

Subject type: emit subject.type: "frontend-build" in findings.

Signatures

Monolithic bundles — one entry chunk carrying the whole app; routes/features not split. High. Evidence: chunk sizes from stats. Fix: route-level code-splitting, dynamic import() for below-the-fold features.
Dead and unused code shipped — exports bundled but never imported; entire component libraries for three components; moment.js with all locales. High. Fix: tree-shakeable imports (import { x }), sideEffects flags, locale/feature pruning; evidence from stats treemaps.
Duplicate dependencies — two versions of the same package via transitive pins; both lodash and lodash-es. Medium-high. Evidence: lockfile/stats. Fix: resolutions/dedupe.
Full hydration on content pages — fully-interactive framework runtime shipped to pages that are 95% static text. Medium-high (client CPU × every visitor). Fix: static generation, islands/partial hydration, or server components where the stack supports them; named trade-off: architecture change, effort high.
Legacy polyfills/transpilation for browsers nobody supports — ES5 output and core-js for a modern-browser audience. Medium. Fix: browserslist matched to actual analytics; dual modern/legacy builds only when the audience data demands it.
Heavy libraries for light jobs — full charting/date/utility libraries where a small alternative or native API serves. Medium; name the specific lighter path per case.
Source maps / dev artifacts in production — shipped .map files or unminified vendor chunks. Low-medium.
No compression/minification gaps — modern minifier not enabled, brotli absent on the asset pipeline (overlaps web-carbon-audit's transfer view; record here when the cause is the build).
Third-party SDK sprawl — analytics/support/AB-test SDKs each shipping their own runtime; loaded eagerly. Medium-high; fix: consolidate, defer, or facade.

Honesty rules

Cost signal (countable)

Not this skill's job

Served-page concerns beyond the bundle (web-carbon-audit), CI time to build it (lean-ci-audit), CDN caching of the chunks (caching-strategy-designer).