Token导航 LogoToken导航TokenDH.com
开发操作浏览器github未标认证来源可访问许可证需确认审计提醒

lighthouse-audit灯塔审计

Agent Skill

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

总安装

396

周安装

17

GitHub Stars

公开资料未说明

下载量

139
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

unknown

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:lighthouse-audit(灯塔审计)
来源仓库:https://github.com/santiagoxor/pintureria-digital
仓库路径:skills/lighthouse-audit
安装命令:
npx skills add https://github.com/santiagoxor/pintureria-digital --skill lighthouse-audit
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/santiagoxor/pintureria-digital --skill lighthouse-audit

简介

lighthouse-audit 用于辅助安全审计、权限检查和凭据风险排查。

  • 适合梳理敏感配置、分析鉴权逻辑或生成安全复核清单。
  • 不能把工具输出直接当最终结论,需人工复核关键结果。
  • 涉及密钥或生产系统时应先确认最小权限和操作边界。
  • 适用宿主包括 Codex、Claude、Cursor、Gemini CLI,接入前应确认版本、权限和运行环境要求。

SKILL.md

Lighthouse Audit

Quick Start

When running Lighthouse audits:

  1. Mobile Audit: npm run lighthouse
  2. Desktop Audit: npm run lighthouse:desktop
  3. JSON Output: npm run lighthouse:json
  4. Analysis: npm run lighthouse:analyze
  5. Diagnostic Report: npm run lighthouse:diagnostic

Commands

Mobile Audit (Default)

# Interactive mobile audit
npm run lighthouse

Configuration:

  • Throttling: 4x CPU slowdown, 150ms RTT, 1600 Kbps
  • Screen: 412x915 (mobile)
  • Opens interactive report in browser

Desktop Audit

# Interactive desktop audit
npm run lighthouse:desktop

Configuration:

  • Throttling: 1x CPU slowdown, 40ms RTT, 10240 Kbps
  • No screen emulation
  • Opens interactive report in browser

JSON Output

# Generate JSON report
npm run lighthouse:json

Output: lighthouse-report.json Use: For automated analysis and CI/CD

Automated Analysis

# Analyze Lighthouse results
npm run lighthouse:analyze

Output: Console analysis of metrics Shows: Scores, Core Web Vitals, opportunities

Diagnostic Report

# Generate diagnostic report
npm run lighthouse:diagnostic

# Local diagnostic (localhost:3000)
npm run lighthouse:diagnostic:local

Output: Markdown report in lighthouse-reports/ Format: Detailed analysis with recommendations

Core Web Vitals

Target Metrics

MetricTargetGoodNeeds ImprovementPoor
LCP< 2.5s< 2.5s2.5s - 4.0s> 4.0s
FID< 100ms< 100ms100ms - 300ms> 300ms
CLS< 0.1< 0.10.1 - 0.25> 0.25
FCP< 1.8s< 1.8s1.8s - 3.0s> 3.0s
TBT< 300ms< 300ms300ms - 600ms> 600ms
SI< 3.4s< 3.4s3.4s - 5.8s> 5.8s

Current Performance

Mobile (11/03/2026, post-deploy lazy Recharts + HeroSlideCarousel). URL: https://www.pintemas.com

  • Performance: 62/100 🟡
  • LCP: 7.58s 🔴
  • FCP: 1.89s 🟡
  • TBT: 331ms 🟡
  • SI: 5.84s 🔴
  • CLS: 0 ✅
  • Accessibility: 82/100 | Best Practices: 93/100 🟢 | SEO: 100/100 🟢

Mobile baseline (23/01/2026): Performance 38, LCP 17.3s, FCP 3.2s, TBT 1,210ms, SI 7.9s. Mejoras: lazy Swiper, IntersectionObserver, hero en servidor, luego lazy Recharts/Hero → LCP y TBT mejoran vs cargas sin optimizar.

Desktop:

  • Performance: 93/100 🟢
  • LCP: 3.2s 🟡
  • FCP: 0.7s 🟢
  • TBT: 60ms 🟢
  • SI: 2.0s 🟢
  • CLS: 0 ✅

Analysis Workflow

1. Run Audit

# Mobile audit
npm run lighthouse:json

2. Analyze Results

# Automated analysis
npm run lighthouse:analyze

3. Review Opportunities

Check the report for:

  • Reduce unused JavaScript: Largest opportunity
  • Defer offscreen images: Image optimization
  • Reduce unused CSS: CSS optimization
  • Avoid legacy JavaScript: Modern browser support
  • Server response time: Backend optimization

4. Generate Diagnostic Report

npm run lighthouse:diagnostic

Output: lighthouse-reports/diagnostic-report-*.md

Optimization Opportunities

*Última auditoría: 11/03/2026 (móvil, producción).*

High Priority

  1. LCP (7.58s — objetivo < 2.5s) — mayor impacto en Performance score

- Optimize hero image (preload, size, format, quality) - Reduce main-thread work and JS execution time - Defer offscreen images: loading="lazy", fetchPriority="low"

  1. Reduce Unused CSS (~200ms potential)

- Verify Tailwind purge configuration - Remove unused CSS rules - Use CSS chunking

  1. Reduce Unused JavaScript

- Lazy load heavy components (Recharts/Hero ya en lazy) - Dynamic imports and code splitting - Remove unused dependencies

Medium Priority

  1. Minimize main-thread work / Reduce JavaScript execution time

- Revisar reporte para scripts más pesados - Code split por ruta y por componente

  1. Server Response Time (~44ms potential)

- Optimize database queries - Add database indexes - Implement caching

  1. Errores en consola y ARIA

- Revisar lighthouse-report.json: "Browser errors", "[aria-*] attributes do not match their roles"

Próxima acción recomendada

  • LCP: Revisar en lighthouse-report.json el nodo "Largest Contentful Paint element" y "LCP breakdown" para confirmar si el elemento es la imagen hero; si es así, valorar preload más temprano, formato/size (ej. w=414 en mobile) o CDN/cache para la imagen.
  • Reduce unused CSS: Ejecutar npm run lighthouse:diagnostic y revisar el informe en lighthouse-reports/ para listado de CSS no usado.

Performance Score Breakdown

Scoring Categories

  • Performance: 0-100 (weighted by Core Web Vitals)
  • Accessibility: 0-100 (WCAG compliance)
  • Best Practices: 0-100 (security, modern APIs)
  • SEO: 0-100 (meta tags, structured data)

Performance Score Calculation

Performance score is calculated from:

  • LCP: 25% weight
  • FID: 25% weight
  • CLS: 15% weight
  • FCP: 10% weight
  • TBT: 10% weight
  • SI: 10% weight
  • TTI: 5% weight

Report Analysis

Reading Lighthouse Reports

  1. Scores: Overall performance rating
  2. Metrics: Core Web Vitals values
  3. Opportunities: Optimization suggestions with savings
  4. Diagnostics: Additional information
  5. Passed Audits: What's working well

Interpreting Opportunities

Each opportunity shows:

  • Savings: Potential time saved (ms)
  • Impact: High/Medium/Low priority
  • Description: What needs to be done
  • Learn More: Link to documentation

Continuous Monitoring

CI/CD Integration

Lighthouse CI is configured in:

  • .github/workflows/performance-budgets.yml
  • lighthouserc.js

Automated Reports

Reports are saved to:

  • lighthouse-reports/ directory
  • Timestamped filenames
  • JSON and Markdown formats

Troubleshooting

Audit Fails or Times Out

  1. Check server is running: npm run start
  2. Verify URL is accessible
  3. Increase timeout in Lighthouse config
  4. Check network connectivity

Inconsistent Results

  1. Run multiple audits and average
  2. Clear browser cache
  3. Use consistent throttling settings
  4. Check for external dependencies

High LCP

  1. Optimize hero image
  2. Preload critical resources
  3. Reduce server response time
  4. Use CDN for static assets

High TBT

  1. Reduce JavaScript execution time
  2. Code split heavy components
  3. Defer non-critical JavaScript
  4. Optimize third-party scripts

Key Files

  • lighthouserc.js - Lighthouse CI configuration
  • scripts/performance/analyze-lighthouse-results.js - Analysis script
  • scripts/performance/lighthouse-diagnostic.js - Diagnostic script
  • lighthouse-reports/ - Generated reports directory

Best Practices

When to Run Audits

  • Before releases: Verify performance hasn't regressed
  • After optimizations: Measure improvements
  • Regular monitoring: Weekly or monthly audits
  • After major changes: New features or dependencies

Audit Environment

  • Production: Best for accurate results
  • Staging: Good for pre-release verification
  • Local: Fast iteration, less accurate

Comparing Results

  • Use same throttling settings
  • Run at similar times
  • Average multiple runs
  • Document changes between audits

适合场景

01

用户想查找某类 Agent Skill 时

02

需要根据任务场景推荐可安装能力包时

03

需要对比不同来源的安装命令和来源信息时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明,方便继续核验

能力 4

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Codex

32.64%
按下载量换算45

Claude

30.78%
按下载量换算43

Cursor

18.92%
按下载量换算26

Gemini CLI

10.26%
按下载量换算14

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

可疑

权限和风险

操作浏览器

该 Skill 可能涉及浏览器控制能力,使用时可能读取或操作网页内容,需要在受控环境中确认权限边界。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。来源安全扫描存在 warning/failed 结果,不能写成本站确认安全。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills