← Back to Skills Marketplace
nucliweb

Webperf

by nucliweb · GitHub ↗ · v0.1.0 · MIT-0
cross-platform ⚠ suspicious
274
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install webperf
Description
Web performance measurement and debugging toolkit. Use when the user asks about web performance, wants to audit a page, or says "analyze performance", "debug...
Usage Guidance
This skill appears to be a set of DevTools snippets for auditing web performance, and it instructs the agent to run scripts in the browser via MCP — that is expected behavior. However, the package does not include the actual snippets it advertises; the SKILL.md references a GitHub repository but provides no automated fetch or included script content. Before using it: (1) verify where the snippet code will come from (inspect the referenced GitHub repo yourself), (2) only run snippets you trust or review the code before evaluating on real sites, and (3) avoid running the snippets on pages containing sensitive data (logged-in sessions, payment pages, etc.), since arbitrary console scripts can read page content and potentially exfiltrate it. If the skill is intended to fetch scripts from the repo automatically, ask the maintainer to add explicit fetch/install steps and include vetted snippets in the package so you can audit them.
Capability Analysis
Type: OpenClaw Skill Name: webperf Version: 0.1.0 The skill bundle is a legitimate web performance measurement toolkit designed for use with Chrome DevTools. It provides structured instructions (SKILL.md) for an AI agent to analyze Core Web Vitals, loading performance, and media optimization using JavaScript snippets. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found; the functionality aligns perfectly with the stated purpose of performance auditing.
Capability Assessment
Purpose & Capability
Name and description match the runtime instructions: the skill is meant to run JavaScript snippets in Chrome DevTools to audit web performance. However, the SKILL.md advertises a collection of 47 snippets and multiple sub-skills, but the skill package contains no snippet code or included assets — only the SKILL.md. It's unclear where the agent is expected to obtain the snippet source (the README points to a GitHub repo, but the skill provides no install/fetch step).
Instruction Scope
Instructions explicitly direct the agent to use MCP actions (mcp__chrome-devtools__navigate_page, evaluate_script, get_console_message) to run snippets in the target page — this is coherent for a webperf tool. The concern: the SKILL.md tells the agent to "load the skill's skill.md to see available snippets and thresholds," but the packaged SKILL.md does not contain the snippets themselves nor instructions to fetch them from the referenced repository. Running arbitrary JS in a user's page can expose page data; the skill gives the agent freedom to evaluate scripts but doesn't include or vet those scripts.
Install Mechanism
No install specification and no code files are present. That minimizes the risk of arbitrary code being written to disk by the installer. Because this is instruction-only, there is nothing to download or extract at install time.
Credentials
The skill requests no environment variables, credentials, or config paths. There are no unexpected secrets or external service tokens required.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent or elevated privileges. Autonomous invocation is allowed by default but not combined here with other high-risk requirements.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install webperf
  3. After installation, invoke the skill by name or use /webperf
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
- Initial release of the webperf skill: a toolkit for measuring and debugging web performance. - Provides 47 JavaScript snippets for Chrome DevTools covering Core Web Vitals, loading, interaction, media, and resource/network quality. - Includes detailed guidance on which skill to use based on common user requests (e.g., "debug LCP", "audit images"). - Outlines a step-by-step workflow for running audits and interpreting results within Chrome DevTools. - Open source under the MIT license and maintained by Joan Leon (@nucliweb).
Metadata
Slug webperf
Version 0.1.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Webperf?

Web performance measurement and debugging toolkit. Use when the user asks about web performance, wants to audit a page, or says "analyze performance", "debug... It is an AI Agent Skill for Claude Code / OpenClaw, with 274 downloads so far.

How do I install Webperf?

Run "/install webperf" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Webperf free?

Yes, Webperf is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Webperf support?

Webperf is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Webperf?

It is built and maintained by nucliweb (@nucliweb); the current version is v0.1.0.

💬 Comments