Frontend audit — bundle size, dependencies, accessibility, performance, component quality.

MITAuto-check: notesFrontend & Design

Install Prism Audit

skills CLI
$ npx skills add jeremylongshore/tons-of-skills-marketplace --skill prism-audit -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install jeremylongshore/tons-of-skills-marketplace prism-audit --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/jeremylongshore/tons-of-skills-marketplace.git skills-src && mkdir -p .claude/skills && cp -r skills-src/plugins/ai-agency/tonone/skills/prism-audit .claude/skills/prism-audit && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
prism-audit
GitHub stars
2.8k
Token cost
~1.4k tokens
SKILL.md length
587 words
Files
2
Skills in repo
3,342
Repo updated
First seen
Licence
MIT

At a glance

Frontend audit — bundle size, dependencies, accessibility, performance, component quality.

  • Works in 7 steps: Detect Environment → Audit Bundle Size → Audit Dependencies → …
  • Asked for frontend review
  • SKILL.md covers Steps and Delivery
  • Calls npm

What it does

Prism Audit is an agent skill from jeremylongshore/tons-of-skills-marketplace. Frontend audit — bundle size, dependencies, accessibility, performance, component quality. Use when asked for "frontend review", "performance audit", "accessibility check", or "bundle size".

Its SKILL.md is about 1.4k tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files (for example `.claude-plugin/plugin.json`).

It sits in Frontend & Design, covering Web performance and Accessibility. It works with npm. The repository describes itself as: Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com. The licence is MIT.

When your agent uses it

  • Asked for frontend review
  • Performance audit
  • Accessibility check

Example prompts

  • “frontend review”
  • “performance audit”
  • “accessibility check”
  • “/prism-audit”

Requirements

  • Pre-approved tools (allowed-tools): Read, Bash, Glob, Grep, WebFetch, WebSearch, AskUserQuestion

Workflow steps

7 steps, taken from the step headings in SKILL.md.

  1. Detect Environment
  2. Audit Bundle Size
  3. Audit Dependencies
  4. Audit Accessibility
  5. Audit Performance Patterns
  6. Audit Component Quality
  7. Report

What it can do on your machine

Read from SKILL.md and the folder at commit cfae287. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Bash
    • Glob
    • Grep
    • WebFetch
    • WebSearch
    • AskUserQuestion

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • npm

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use npm, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Prism Audit loads about 1.4k tokens when it runs. Until then it costs about 51 tokens; SKILL.md has 587 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~51
When it runs · the whole SKILL.md, loaded when a task matches
~1.4k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NotePre-approves every shell command (allowed-tools: Bash)SKILL.md
    allowed-tools: Read, Bash, Glob, Grep, WebFetch, WebSearch, AskUserQuestion

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from jeremylongshore/tons-of-skills-marketplace at commit cfae287, republished under its MIT licence (© jeremylongshore). 587 words, ~1,433 tokens.

Download SKILL.mdSave it as .claude/skills/prism-audit/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.
name
prism-audit
description
Frontend audit — bundle size, dependencies, accessibility, performance, component quality. Use when asked for "frontend review", "performance audit", "accessibility check", or "bundle size".
allowed-tools
Read, Bash, Glob, Grep, WebFetch, WebSearch, AskUserQuestion
version
0.6.4
author
tonone-ai <hello@tonone.ai>
license
MIT

Frontend Audit

You are Prism — the frontend and developer experience engineer from the Engineering Team.

Follow the output format defined in docs/output-kit.md — 40-line CLI max, box-drawing skeleton, unified severity indicators, compressed prose.

Steps

Step 0: Detect Environment

Discover the project's frontend stack:

  • Check for framework: next.config.*, nuxt.config.*, svelte.config.*, vite.config.*, webpack.config.*
  • Check package.json for: all dependencies and devDependencies, scripts (build, test, lint)
  • Check for TypeScript: tsconfig.json — check strictness settings
  • Check for testing: test config files, test directories, coverage reports
  • Check build output: dist/, .next/, build/ — look for bundle analysis artifacts
  • Check for CI: existing lint, test, and build steps
Step 1: Audit Bundle Size

Analyze what's being shipped to users:

  • Check build output size: total JS, CSS, and assets
  • Look for bundle analysis config or output (@next/bundle-analyzer, rollup-plugin-visualizer, webpack-bundle-analyzer)
  • Identify heavy dependencies: search node_modules sizes or check bundlephobia-equivalent data in package.json
  • Check for code splitting: dynamic imports, lazy loading, route-based splitting
  • Check for tree shaking effectiveness: are barrel imports pulling in entire libraries
  • Flag dependencies over 50KB gzipped that might have lighter alternatives

Report: total bundle size, largest chunks, heavy dependencies with alternatives.

Step 2: Audit Dependencies

Assess dependency health:

  • Count: total dependencies vs. devDependencies — flag if unreasonably high
  • Duplicates: check for multiple versions of the same library (e.g., two React versions, multiple date libraries)
  • Freshness: check for severely outdated dependencies (major versions behind)
  • Unused: search codebase for imports — flag dependencies in package.json that are never imported
  • Security: check for known vulnerabilities if npm audit or equivalent data is available
  • Size vs. value: flag large dependencies used for trivial functionality (e.g., lodash for one function)
Step 3: Audit Accessibility

Check accessibility baseline:

  • Semantic HTML: search for div/span soup where semantic elements should be used (nav, main, article, button, label)
  • ARIA: check for missing ARIA labels on interactive elements, icons, and images
  • Keyboard navigation: check for onClick without onKeyDown, missing tabIndex, focus trapping in modals
  • Forms: check for labels associated with inputs, error announcements, fieldset/legend usage
  • Color contrast: check for hard-coded colors that may fail WCAG AA (contrast ratio < 4.5:1)
  • Focus indicators: check if focus styles are removed (outline: none) without replacements
  • Skip links: check for skip navigation link on content-heavy pages
Show full SKILL.md (227 more words)Show less
Step 4: Audit Performance Patterns

Check for common performance issues:

  • Unnecessary re-renders: components that re-render on every parent render without memoization where needed
  • Missing code splitting: large pages loaded as single chunks, no dynamic imports for heavy components
  • Unoptimized images: no next/image or equivalent, missing width/height, no lazy loading for below-fold images
  • Client-side fetching: data fetched on client that could be server-rendered
  • Waterfalls: sequential data fetching where parallel fetching is possible
  • Missing Suspense boundaries: no streaming or progressive loading
  • Large lists: rendering hundreds of items without virtualization
Step 5: Audit Component Quality

Check code quality patterns:

  • Prop drilling: data passed through many component layers — should use context or state management
  • Giant components: files over 300 lines that should be split
  • Type safety: usage of any, missing types on API responses, untyped props
  • Error handling: components that crash on bad data instead of showing error states
  • Loading states: missing loading indicators on async operations
  • Consistency: naming conventions, file structure, import patterns
Step 6: Report

Present findings with specific fixes and impact:

## Frontend Audit Report

### Score: [X/10]

### Bundle Size
- Total: [size] (gzipped)
- Largest chunks: [list]
- Heavy dependencies: [list with alternatives]
- Code splitting: [assessment]

### Dependencies
- Total: [count] deps, [count] devDeps
- Issues: [duplicates, unused, outdated, oversized]

### Accessibility
- Semantic HTML: [pass/issues found]
- Keyboard navigation: [pass/issues found]
- ARIA: [pass/issues found]
- Forms: [pass/issues found]

### Performance
- [issue] → [fix] — estimated impact: [high/medium/low]

### Component Quality
- [issue] → [fix]

### Priority Fixes
1. [highest impact fix] — [estimated effort]
2. [next fix] — [estimated effort]
3. [next fix] — [estimated effort]

Focus on actionable findings. Don't list every minor style inconsistency — prioritize what impacts users, developers, and maintainability.

Delivery

If output exceeds the 40-line CLI budget, invoke /atlas-report with the full findings. The HTML report is the output. CLI is the receipt — box header, one-line verdict, top 3 findings, and the report path. Never dump analysis to CLI.

© jeremylongshore, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file in plugins/ai-agency/tonone/skills/prism-audit of jeremylongshore/tons-of-skills-marketplace.

  • SKILL.md
  • .claude-plugin/plugin.json

Open the folder on GitHubat commit cfae287

Compare with similar skills

Prism Audit next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Prism Audit compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Prism Audit this skilljeremylongshore/tons-of-skills-marketplace2.8k—~1.4kAutomated safety check: NotesMIT
Web Quality Auditaddyosmani/web-quality-skills2.9k—~2.6kAutomated safety check: PassMIT
Web Quality Auditmidudev/100cosas.dev1143 repos~1.7kAutomated safety check: PassMIT
Optimize Loadtextura-agency/next16-claude-starter135—~4.6kAutomated safety check: NotesUnlicense
Kb Web ScanningCommunity-Access/accessibility-agents423—~1.2kAutomated safety check: PassMIT
Building ComponentsCompound-inc/rift1241 repos~538Automated safety check: PassCustom licence

Similar skills

  • Web Quality Audit

    addyosmani/web-quality-skills

    Run an evidence-led web quality audit covering performance, accessibility, SEO, best practices, and agentic browsing.

    2.9k GitHub stars~2.6k tokensUpdated 1 mo ago
    Frontend & DesignAuto-check passed
  • Web Quality Audit

    midudev/100cosas.dev

    Comprehensive web quality audit covering performance, accessibility, SEO, and best practices.

    114 GitHub starsUsed in 3 repos~1.7k tokens
    Frontend & DesignAuto-check passed
  • Optimize Load

    textura-agency/next16-claude-starter

    Get a page into Lighthouse's green zone on desktop and mobile, for people AND for the robot form crawlers get — build it, audit all four categories (Performance, Accessibility, Best Practices, SEO)…

    135 GitHub stars~4.6k tokensUpdated yesterday
    Frontend & DesignAuto-check: notes
  • Kb Web Scanning

    Community-Access/accessibility-agents

    Reference data, not a reviewer. An agent skill from Community-Access/accessibility-agents.

    423 GitHub stars~1.2k tokensUpdated 17 days ago
    Frontend & DesignAuto-check passed
  • Building Components

    Compound-inc/rift

    Guide for building modern, accessible, and composable UI components.

    124 GitHub starsUsed in 1 repo~538 tokens
    Frontend & DesignAuto-check passed
  • Accessibility

    ericrisco/rsc-harness

    A skill your agent uses when making a web UI conform to WCAG 2.2 Level AA — axe-core or Lighthouse a11y violations, keyboard operability, focus management, ARIA roles/names/live regions, contrast…

    190 GitHub stars~3.4k tokensUpdated today
    Frontend & DesignAuto-check passed

More from jeremylongshore/tons-of-skills-marketplace

All 3,342 skills in this repo
  • Performing Security Code Review

    jeremylongshore/tons-of-skills-marketplace

    Execute this skill enables AI assistant to conduct a security-focused code review using the security-agent plugin.

    2.8k GitHub starsUsed in 2 repos~1.3k tokens
    Auto-check: notes
  • Adapting Transfer Learning Models

    jeremylongshore/tons-of-skills-marketplace

    Build this skill automates the adaptation of pre-trained machine learning models using transfer learning techniques.

    2.8k GitHub stars~1.1k tokensUpdated today
    Auto-check passed
  • Agent Context Loader

    jeremylongshore/tons-of-skills-marketplace

    Execute proactive auto-loading: automatically detects and loads agents.md files.

    2.8k GitHub stars~1.1k tokensUpdated today
    Auto-check passed
  • Aggregating Performance Metrics

    jeremylongshore/tons-of-skills-marketplace

    Aggregate and centralize performance metrics from applications, systems, databases, caches, and services.

    2.8k GitHub stars~1.2k tokensUpdated today
    Auto-check passed
  • Analyzing Capacity Planning

    jeremylongshore/tons-of-skills-marketplace

    Execute this skill enables AI assistant to analyze capacity requirements and plan for future growth.

    2.8k GitHub stars~947 tokensUpdated today
    Auto-check passed
  • Analyzing Database Indexes

    jeremylongshore/tons-of-skills-marketplace

    Process use when you need to work with database indexing. An agent skill from jeremylongshore/tons-of-skills-marketplace.

    2.8k GitHub stars~2k tokensUpdated today
    Auto-check passed

Works with

Questions about Prism Audit

What does Prism Audit do?

Frontend audit — bundle size, dependencies, accessibility, performance, component quality. Prism Audit is an agent skill from jeremylongshore/tons-of-skills-marketplace. Frontend audit — bundle size, dependencies, accessibility, performance, component quality.

When should I use Prism Audit?

Prism Audit fits situations like: asked for frontend review; performance audit; accessibility check.

How do I install Prism Audit in Claude Code?

Run `npx skills add jeremylongshore/tons-of-skills-marketplace --skill prism-audit -a claude-code`. Or copy the skill folder (plugins/ai-agency/tonone/skills/prism-audit in jeremylongshore/tons-of-skills-marketplace) into .claude/skills/prism-audit in your project. Claude Code loads it when a task matches its description.

How do I install Prism Audit in Codex?

Run `npx skills add jeremylongshore/tons-of-skills-marketplace --skill prism-audit -a codex`. Or copy the skill folder (plugins/ai-agency/tonone/skills/prism-audit in jeremylongshore/tons-of-skills-marketplace) into .agents/skills/prism-audit in your project. Codex loads it when a task matches its description.

Can I use Prism Audit in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add jeremylongshore/tons-of-skills-marketplace --skill prism-audit -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/prism-audit, .gemini/skills/prism-audit, .github/skills/prism-audit and .opencode/skills/prism-audit in your project.

What does Prism Audit need to run?

Going by SKILL.md and its folder, Prism Audit needs the command-line tools its instructions call (npm). Its frontmatter pre-approves these tools: Read, Bash, Glob, Grep, WebFetch, WebSearch, AskUserQuestion.

Does Prism Audit access the network?

SKILL.md contains no URLs. Its commands use npm, which can reach the network depending on how they are called. This is read from the text; nothing was executed.

Is Prism Audit safe to install?

Our automated static check of SKILL.md found notes only (pre-approves every shell command (allowed-tools: bash)), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.

What licence does Prism Audit use?

Prism Audit is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Prism Audit use?

About 1.4k tokens (SKILL.md is roughly 5.7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Prism Audit?

Skills that share tags, products or a category with Prism Audit: Web Quality Audit (addyosmani/web-quality-skills, 2.9k stars), Web Quality Audit (midudev/100cosas.dev, 114 stars), Optimize Load (textura-agency/next16-claude-starter, 135 stars) and Kb Web Scanning (Community-Access/accessibility-agents, 423 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Prism Audit?

jeremylongshore (a GitHub user) maintains it in jeremylongshore/tons-of-skills-marketplace, which has 2,827 GitHub stars. The repository holds 3,342 skills in this directory. The repository was last updated on October 10, 2026.

Source: jeremylongshore/tons-of-skills-marketplace on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.