How do I install the Bundle Weight skill?

Run npx skillmds@latest add starr-del/bundle-weight in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Bundle Weight safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Bundle Weight?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Bundle Weight free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Bundle Weight?

Starr-del (@starr-del) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Bundle Weight by starr-del — Agent Skill

Name: Bundle Weight
Author: Starr-del

Bundle Weight

Audit package.json for heavyweight dependencies, duplicate-purpose libraries, and misplaced build tools before they bloat bundles and slow cold starts. Use when the user mentions slow builds, large bundles, slow page loads, serverless cold starts, 'why is my app heavy', dependency cleanup, or when reviewing any package.json. Runs fully offline — no API keys, no network, no credentials.

Starr-del 76160c8 2 files · 8.3 KB Updated Sep 17, 2026

File contents

bundle-weight

Part of shipsafe — offline deploy-safety skills. Every script is stdlib-only Python 3.8+; nothing leaves the machine.

python3 scripts/audit_weight.py <project_root> [--json]

Three checks against curated tables:

HEAVY_DEP — packages with well-known lighter or native replacements (moment → date-fns/Intl, axios → fetch, uuid → crypto.randomUUID, dotenv → platform-native env, deprecated request...).
DUPLICATE_PURPOSE — two+ libraries doing the same job (HTTP clients, date libs, state managers, validators, CSS-in-JS). Each ships in full.
MISPLACED_TYPES — @types/*, typescript, eslint etc. in dependencies instead of devDependencies, slowing production installs.

Interpretation guidance: these are review prompts, not mandates. A flagged dep that the project uses deeply (e.g. rxjs with heavy operator use, axios with interceptors) is a legitimate keep — confirm usage before recommending removal, and prefer suggesting the migration only when the usage is shallow.

Exit codes: 0 clean, 1 findings.

All paths below are relative to this skill's directory (bundle-weight/).

Frequently asked questions