github-codespaces-efficiency
Audit and improve GitHub Codespaces efficiency. Use this skill when a user wants faster Codespaces startup, lower Codespaces spend, slim devcontainers, right-size machines, tune idle timeout, or scope prebuilds to branches with sustained usage.
What this skill does
# GitHub Codespaces Efficiency Use this skill as a lean entrypoint for GitHub Codespaces efficiency work. Inspect the repo, identify waste, and load only needed references. If no `.devcontainer/` exists yet, load [`references/codespaces.md`](./references/codespaces.md) and define a baseline before proceeding with the steps below. ## Use This Skill When - The user wants faster Codespaces startup or lower Codespaces spend. - The repo has a `.devcontainer/` or explicit Codespaces configuration questions. - The user asks for devcontainer optimization, machine sizing, prebuild strategy, or idle-timeout guidance. - The user is setting up Codespaces for the first time or needs help creating a new `.devcontainer/` from scratch. ## Load Only What You Need - [`references/codespaces.md`](./references/codespaces.md) — devcontainer, machine-sizing, prebuild, idle-timeout guidance, and reporting. - [`references/review-rubric.md`](./references/review-rubric.md) — load only for review passes. ## Core Workflow ### 1. Measure first ```bash find .devcontainer -maxdepth 2 -type f gh codespace list repo=$(gh repo view --json nameWithOwner --jq .nameWithOwner) gh api "/repos/$repo/codespaces/machines" ``` If `gh` auth fails or the user lacks repo admin scope, proceed with static analysis of `.devcontainer/` files; mark machine-type and prebuild recommendations as unverified. Look for: devcontainer image >2 GB or more than 10 features, machine type larger than usage data supports, missing `devcontainer-lock.json` (recommend adding — many repos predate lock-file support), prebuilds scoped too broadly, and idle timeout mismatched to usage patterns. ### 2. Apply guardrails Check each proposed fix against these rules before recommending it: 1. Does not remove tools the team uses every day — drop any fix that strips required development tools or extensions. 2. Does not assume smaller is always better — balance machine cost against developer experience and throughput. 3. Does not turn the devcontainer into a production image — drop any fix that adds production-only dependencies unless the team explicitly requires it. 4. Incremental changes preferred — a greenfield baseline is appropriate only when no `.devcontainer/` exists; flag (do not drop) changes that restructure an existing config. 5. Repo changes stay separate from org settings — split any fix that mixes repo-editable files with org-level or user-level Codespaces settings into two distinct recommendations. ### 3. Select the top 3 fixes From the six candidates below, keep only those supported by audit evidence from step 1 *and* passing all guardrails from step 2. Rank survivors by estimated monthly cost savings (USD). Select all candidates that meet both criteria, up to a maximum of 3. 1. Trim devcontainer — remove features, packages, or extensions not needed for everyday development work; target image <2 GB and fewer than 10 features 2. Right-size machine type — match to observed usage patterns; if data is unavailable, state assumptions explicitly 3. Scope prebuilds — enable for the default branch, `release/*` branches active in the last 14 days, and branches with more than 5 Codespaces per week; disable for all others 4. Tune idle timeout — 30 min default; 15 min if most sessions end before 30 min; 60 min if most sessions run longer 5. Remove unused extensions or port-forwarding rules 6. Reduce devcontainer image size and improve layer caching ### 4. Verify - Start a test Codespace to confirm devcontainer changes build and start as expected. - Validate machine sizing against observed usage when telemetry is available; otherwise mark as unverified. - Treat unexpected build or startup failures as real bugs even when the configuration looks correct. ## Required Output **Waste sources:** [top cost or startup-time drivers] **Proposed fixes:** [top 3 changes supported by audit evidence and passing guardrails] **Validation:** [proven live / static-only / remaining risk] **Impact:** - Startup time: [expected] / [measured if available] - Monthly spend: [expected] / [measured if available] - Resource utilization: [expected] / [measured if available] ## References - [`references/codespaces.md`](./references/codespaces.md) - [`references/review-rubric.md`](./references/review-rubric.md) — load when reviewing completed efficiency work
Related in Security
mac-ops
IncludedComprehensive macOS workstation operations — diagnose kernel panics, identify failing drives, audit launchd startup items, decode wake reasons, triage TCC permission denials, manage APFS snapshots, recover from no-boot. Use for: Mac is slow, slow bootup, won't boot, kernel panic, kernel_task hot, mds_stores CPU, photoanalysisd, cloudd, login loop, gray screen, sleep wake failure, drive failing, IO errors, APFS snapshots eating space, Time Machine local snapshots, Spotlight indexing, launchd, LaunchAgent, LaunchDaemon, login items, TCC permissions, Full Disk Access, Screen Recording denied, Gatekeeper, quarantine, com.apple.quarantine, app is damaged, helper tool, /Library/PrivilegedHelperTools, pmset, wake reasons, dark wake, sysdiagnose, panic.ips, DiagnosticReports, configuration profile, MDM profile, remote diagnostics over SSH.
a11y-audit
IncludedRun accessibility audits on web projects combining automated scanning (axe-core, Lighthouse) with WCAG 2.1 AA compliance mapping, manual check guidance, and structured reporting. Output is configurable: markdown report only, markdown plus machine-readable JSON, or markdown plus issue tracker integration. Use this skill whenever the user mentions "accessibility audit", "a11y audit", "WCAG audit", "accessibility check", "compliance scan", or asks to check a web project for accessibility issues. Also trigger when the user wants to verify WCAG conformance or map findings to a specific standard (CAN-ASC-6.2, EN 301 549, ADA/AODA).
erpclaw
IncludedAI-native ERP system with self-extending OS. Full accounting, invoicing, inventory, purchasing, tax, billing, HR, payroll, advanced accounting (ASC 606/842, intercompany, consolidation), and financial reporting. 413 actions across 14 domains, 43 expansion modules. Constitutional guardrails, adversarial audit, schema migration. Double-entry GL, immutable audit trail, US GAAP.
assess
IncludedAssesses and rates quality 0-10 across multiple dimensions (correctness, maintainability, security, performance, testability, simplicity) with pros/cons analysis. Compares against project conventions and prior decisions from memory. Produces structured evaluation reports with actionable improvement suggestions. Use when evaluating code, designs, architectures, or comparing alternative approaches.
spring-boot-security-jwt
IncludedProvides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based access control using Spring Security 6.x. Use when implementing authentication or authorization in Spring Boot applications.
code-hardcode-audit
IncludedDetect hardcoded values, magic numbers, and leaked secrets. TRIGGERS - hardcode audit, magic numbers, PLR2004, secret scanning.