What is web-perf?
web-perf is a Claude skill by cloudflare that audit Core Web Vitals and render-blocking resources. It is listed under Security and has 3,091 GitHub stars.
| Type | Claude skill |
|---|---|
| Author | cloudflare |
| Repository | cloudflare/skills |
| Popularity | 3,091 GitHub stars |
| Category | Security |
| Security | Low risk (96/100) |
| Rank | #594 of 1,262 Claude skills; #13 in Security |
| SKILL.md length | 201 lines |
| License | Apache-2.0 |
| Last commit | 2026-10-15 |
| Stars this week | +50 |
| Installs in the last 24h | 1,000 |
Is web-perf safe to install?
web-perf scores 96/100 on the MCPMods security check: Low risk. No checks raised a concern. It passed 8 of 9 checks.
Skill results come from a static scan of its SKILL.md for instruction overrides, hidden actions, risky commands and credential access.
| Check | Result |
|---|---|
| No instruction-override phrases | Pass |
| No hidden actions | Pass |
| No pipe-to-shell installers | Pass |
| No obfuscated code | Pass |
| No destructive commands | Pass |
| Doesn't ask for keys or credentials | Pass |
| Makes network requests | Note |
| No shell commands | Pass |
| Installs no packages | Pass |
What the scan matched
- network:
https://
How do I install web-perf?
- Install with the skills CLI. Works for Claude Code and other agents that read skills.
npx skills add https://github.com/cloudflare/skills --skill web-perf
- Or copy it by hand. Claude Code loads any folder with a SKILL.md from ~/.claude/skills.
git clone https://github.com/cloudflare/skills cp -r skills/skills/web-perf ~/.claude/skills/web-perf
- Use it. Claude loads the skill when a task matches its description. You can also name it in your prompt.
Use the web-perf skill to …
Or ask Claude to set it up
Paste this into Claude Code and it installs web-perf for you:
Install the "web-perf" skill from https://github.com/cloudflare/skills/tree/main/skills/web-perf into ~/.claude/skills, then tell me in one line what it does.
More from cloudflare/skills
This repository has 8 Claude skills on MCPMods.
- cloudflare: Comprehensive Cloudflare platform skill covering Workers, Pages, storage, AI, networking, security, and IaC (Low risk)
- workers-best-practices: Review and author Workers code against production best practices and wrangler.jsonc conventions (Low risk)
- wrangler: Deploy and manage Workers, KV, R2, D1, Vectorize, Queues, Workflows (Low risk)
- agents-sdk: Build stateful AI agents with scheduling, RPC, and MCP servers (Low risk)
- cloudflare-email-service: Send transactional email and route inbound mail with Cloudflare Email Sending and Email Routing (Low risk)
- durable-objects: Stateful coordination with RPC, SQLite, and WebSockets (Low risk)
- sandbox-sdk: Build sandboxed applications for secure, isolated code execution on Workers (Not scanned)