Generated banner for K6 Perf Test Website
Generated logo for K6 Perf Test Website

K6 Perf Test Website

Grafana LabsOfficialPublished by Grafana Labs

  • Skill
  • Workflow
  • Cloud and DevOps
  • Apache-2.0
  • Low risk
  • Has scripts

From the author

Use when the user wants to performance-test, load-test, or stress-test a public website end-to-end with k6. Produces a hybrid (protocol + browser) test suite, SLO-backed thresholds, a load-generator monitor sidecar, and a Grafana-side investigation playbook for backends the user owns. Triggers on "perf test my site", "performance test my site", "load test this URL", "stress test my web app", "I want to load test [URL]", "set up k6 against my website", "write a k6 suite for [site]", "see if my site handles N concurrent users", or "how does my site perform under traffic". Use this skill whenever the user mentions k6, load testing, stress testing, performance testing, or wants to validate a website under traffic — even if they don't explicitly use the word "test" or ask for the specific outputs this skill produces. This skill is for a full multi-test suite across several workflows; for a single browser test — functional OR a browser load test measuring Web Vitals for one journey — use k6-browser-test.
— the description by Grafana Labs

AutoGineer summary

Written by AutoGineer from the skill’s own files, not by the author

This skill provides an opinionated, structured workflow for performance, load, and stress testing public websites. It generates a complete test suite including functional protocol and browser tests, hybrid load scenarios, SLO-backed thresholds, and monitoring sidecars. Designed for teams that need to validate website performance under traffic, it emphasizes a rigorous process: eliciting workflows, ensuring functional tests pass, and then executing various load test types (smoke, average, stress, spike, soak, breakpoint) with proper monitoring and reporting.

What it does

  • Scaffolds a complete performance testing project structure.
  • Facilitates recording user workflows using Playwright.
  • Builds functional protocol and browser tests to ensure baseline stability.
  • Configures hybrid load tests with SLO-backed thresholds and per-endpoint tagging.
  • Provides a load-generator monitor sidecar to ensure test validity.
  • Generates structured reports and investigation playbooks for backend analysis.

When to use it

  • When you need to perform load, stress, or performance testing on a public website.
  • When you want to validate how a website handles specific concurrent user loads.
  • When you need a full suite of tests rather than a single functional browser test.
  • When you need to investigate backend performance bottlenecks under simulated traffic.

Advantages

  • Enforces a disciplined, repeatable testing methodology.
  • Reduces guesswork by requiring explicit workflow elicitation.
  • Ensures load tests are only run against functional, stable code.
  • Provides visibility into both protocol-level performance and real-world browser experience.
  • Includes built-in monitoring to prevent false results caused by load-generator bottlenecks.

Usage examples

“perf test my site”
The agent will initiate the workflow elicitation process to understand your site's critical paths and testing requirements.
“see if my site handles 500 concurrent users”
The agent will guide you through setting up a stress test scenario with appropriate thresholds to evaluate site capacity.
“stress test my web app”
The agent will scaffold the project and help you record the necessary workflows to begin building a hybrid load test suite.
“how does my site perform under traffic”
The agent will help you design a series of load tests (smoke, average, spike) to characterize your site's performance profile.

Install

  1. Download the skill as a ZIP:

    https://autogineer.com/agent-skills/grafana/k6-perf-test-website/download
  2. Unzip it into the cross-client skills folder of your project:

    mkdir -p .agents/skills && unzip k6-perf-test-website.zip -d .agents/skills

Documentation by Grafana Labs

k6-perf-test-website

An end-to-end, opinionated workflow for performance-testing any public website with k6. The skill produces:

  • A scaffolded project with one folder per user-described workflow.

  • Functional protocol + browser tests (must pass before load testing).

  • Hybrid load tests (protocol scenario + 1 browser VU) per test type (smoke / average / stress / spike / soak / breakpoint).

  • SLO-backed thresholds with per-endpoint tagging and Web Vitals.

  • A cross-platform load-generator monitor sidecar.

  • Optional Grafana-side investigation when the user owns the backend.

  • A structured Markdown report at the end.

Just want one functional browser test from a plain-language journey? This skill builds a full, multi-test performance suite. For a single k6/browser functional (or standalone browser load) test — with selectors discovered by exploring the live site — use the k6-browser-test skill instead.

This skill enforces a few opinions you should not silently override:

  • Always elicit workflows first. Don't guess.

  • Functional tests must be green before load tests run.

  • Always monitor the load generator — server-looks-slow is often laptop-looks-slow.

  • Local for validation, cloud for scale — but ask the user where to run each test type; don't hardcode.

  • No shared tests/lib/. Iteration-body duplication is preferred; each script reads cleanly on its own during incident review.

Prerequisites

  • k6 ≥ v2.0.0 (k6 version) — required for stable k6/browser, expect(), async/await iteration functions, and per-request tags.

  • Node.js ≥ 20 + npm.

  • Playwright with the Chromium download (npx playwright install chromium).

  • har-to-k6 (npm i -D har-to-k6).

  • Network access from the load-generator host to the target site.

Tools the skill prefers when installed:

  • mcp-k6 — script creation, Playwright→k6/browser migration, API lookup. Prefer over hand-writing k6 boilerplate.

  • mcp-grafana — in-session Prometheus/Loki/Tempo/Pyroscope queries during §9 backend investigation.

  • gcx — Grafana Cloud CLI for shell-friendly queries, datasource discovery, and Grafana Cloud k6 cloud-run dispatch.

  • k6 binary — local validation runs and breakpoint hunting.

  • k6 x docs (xk6-docs) — look up k6 API surface when writing or editing scripts without mcp-k6 available.

If these tools are not configured the skill falls back to plain CLI tools (k6, npx, curl) and hand-written scripts. The skill does not own toolchain setup; defer to the user's existing setup process.

Explicit non-goals:

  • Protocol-only suites (out of scope for this skill).

  • API-only / non-browser apps.

  • Mobile-native testing.

  • Capacity planning beyond finding and tagging a breakpoint.

Workflow overview

Tick these off in order. Each step has a section below.

  1. Elicit workflows from the user. §1

  2. Scaffold the project from assets/. §2

  3. Record each workflow with Playwright. §3

  4. Build functional protocol + browser tests; run tests/run-all.sh until green. §4

  5. Design SLO-backed thresholds and per-endpoint tags. §5

  6. Build hybrid load tests, one file per test type. §6

  7. Run validation locally with the LG sidecar. §7

  8. Push to Grafana Cloud k6 for the test types the user chose for cloud. §8

  9. Investigate the backend with Grafana (if owned). §9

  10. Report back to the user. §10

1. Elicit workflows

The single most important step. Without explicit workflows, every later step is guesswork.

Ask the user the questions in references/workflow-elicitation.md and record answers in a runbook.md alongside the scaffolded project.

You must capture: 2-4 named workflows, credentials, read vs write, destructive actions to avoid during soak, worry list, existing SLOs, backend ownership and Grafana access, and per test type whether each runs locally or in Grafana Cloud k6.

If the user can't name at least one workflow, stop and clarify; do not proceed.

2. Scaffold the project

Copy the assets/ tree from this skill into the user's chosen directory. The skill's assets/ directory is at <SKILL_DIR>/assets/, where <SKILL_DIR> is the absolute path to this skill's directory — your harness exposes this (e.g. opencode prefixes skill metadata with a Base directory for this skill: line). If you can't determine <SKILL_DIR> from context, ask the user.

cp -R "<SKILL_DIR>/assets/." "<target-dir>/"

If cp -R is blocked by sandbox permissions, copy files individually via your agent's file-write tool.

The scaffolded layout:

<target-dir>/
├── package.json
├── .gitignore
├── README.md
├── runbook.md                       # you create from §1 answers
├── recordings/
│   ├── README.md
│   └── scripts/
│       └── recorder.template.js     # copy per workflow → wN-<short-name>.js, …
├── tests/
│   ├── run-all.sh
│   └── workflow.template/           # copy per workflow → wN-<short-name>/, …
│       ├── from-har.js
│       ├── protocol.js
│       ├── browser.js
│       ├── smoke.js
│       ├── average.js
│       ├── stress.js
│       ├── spike.js
│       ├── soak.js
│       └── breakpoint.js
└── tools/
    ├── lg-monitor.sh
    └── run-with-monitor.sh

For each workflow: copy recorder.template.js → recordings/scripts/wN-<short-name>.js, copy tests/workflow.template/ → tests/wN-<short-name>/, and replace <WORKFLOW_PLACEHOLDER> markers with the workflow's short name.

Then install:

cd <target-dir> && npm install && npx playwright install chromium

3. Record each workflow

Per workflow:

  1. Fill in recordings/scripts/wN-<short-name>.js: user-action sequence, recordHar.urlFilter regex (allow-list the target host; block third-party RUM/ads — see references/recording-with-playwright.md), and a real Chrome userAgent (the default HeadlessChrome UA triggers bot-blocking on many sites).

  2. Run: node recordings/scripts/wN-<short-name>.js → writes recordings/har/wN-<short-name>.har

  3. Convert: npx har-to-k6 recordings/har/wN-<short-name>.har -o tests/wN-<short-name>/from-har.js

  4. Commit both HAR and from-har.js (audit trail for bundle-path changes).

If the recorder fails or produces an unusable HAR (bot-blocking, missing hydration, third-party noise), see the Recording section of references/gotchas.md and references/recording-with-playwright.md.

Prefer mcp-k6 recording and migration tools if available.

4. Build functional tests

Per workflow:

  1. Hand-clean from-har.js into protocol.js — drop per-request UA headers, rename groups, parameterise BASE_URL, replace session tokens, drop sleep(1), add expect() on every load-bearing response. Full procedure in references/functional-tests.md.

  2. Hand-write browser.js from the Playwright recorder using the 5-step procedure in references/functional-tests.md.

  3. Run ./tests/run-all.sh. Do not proceed to §5 until it exits 0.

Prefer mcp-k6 migration tools for Playwright→k6/browser conversion.

5. Design SLOs and thresholds

Adjust the opinionated defaults in assets/tests/workflow.template/ to the user's stated SLOs from §1. Four layers:

  1. Global SLOs — overall error rate + aggregate latency.

  2. Per-endpoint thresholds — tag every protocol request, threshold per tag.

  3. Per-iteration thresholds — workflow time + iteration completion rate.

  4. Web Vitals — LCP/INP/CLS only (no FCP).

Default globals:

http_req_failed: ['rate<0.01'],
http_req_duration: ['p(95)<500'],
checks: ['rate>0.99'],

Per-endpoint tagging:

http.get(`${BASE_URL}/api/things`, { tags: { name: 'GetThings' } });
'http_req_duration{name:GetThings}': ['p(95)<400', 'p(99)<800'],

Web Vitals:

browser_web_vital_lcp: ['p(95)<2500'],
browser_web_vital_inp: ['p(95)<200'],
browser_web_vital_cls: ['p(95)<0.1'],

See references/slo-design.md for per-iteration tuning, the performance.mark custom-Trend pattern, iteration_completed Rate, breakpoint abort-on-fail thresholds, and loosening rules.

6. Build hybrid load tests

Per workflow, one file per test type. Each file has a protocol scenario (drives load) plus a single browser VU (measures Web Vitals under load). Breakpoint is protocol-only — a browser VU adds noise to the signal.

TypeExecutorDefaults
smokeconstant-vus3 VUs × 1m
averageramping-vus0→20→0 over 14m
stressramping-vus0→50→0 over 20m
spikeramping-vus0→100→0 over 2m
soakramping-vus0→10→0 over 70m
breakpointramping-arrival-rate5/s→500/s over 20m, abortOnFail

Tune per workflow once you've seen smoke results. See references/test-types.md for rationale and references/hybrid-load-design.md for why one file per type and why duplication between files is acceptable.

7. Run locally with LG sidecar

./tools/run-with-monitor.sh tests/wN-<short-name>/smoke.js

Starts lg-monitor.sh in the background, runs k6, then prints a summary verdict: OK (≥30% idle), NOTE (10–30%), or WARNING (<10%). If WARNING, the laptop is the bottleneck — reduce VUs, switch to cloud, or split across multiple LGs. See references/lg-monitoring.md.

8. Push to Grafana Cloud k6

For each test type assigned to cloud in the §1 runbook:

  1. Confirm k6 cloud login works (the skill does not own auth setup).

  2. Run smoke locally first to validate the script.

  3. k6 cloud run tests/wN-<short-name>/<type>.js

  4. Capture the run URL for the §10 report.

Cost reminder: browser VU-hours are billed 10× protocol VU-hours. Soak and breakpoint are the most expensive. Check limits before long runs. See references/local-vs-cloud.md.

9. Investigate the backend

Only if the user owns the backend and has Grafana access.

  1. Discover datasources via mcp-grafana or gcx datasources list.

  2. Ask the user for service label keys — do not guess.

  3. Correlate the k6 run window with RED metrics, error logs, traces, and profiles (Pyroscope — use explicit from/to for the run window).

  4. Hand back specific evidence: timestamps, query strings, panel links.

See references/grafana-investigation.md for the full flow including how to verify absence before reporting it.

10. Report back

Fill in the report template from references/reporting.md:

  • Summary — workflows, test types, dates

  • SLOs — pass/fail per threshold

  • Findings — one paragraph per finding, ordered by severity, with specific evidence

  • Evidence — k6 output paths, LG monitor CSVs, cloud run URLs, Grafana links

  • Suggested next steps

Always be specific. "Latency is high" is not a finding. "GetPizza p(95) hit 1.4s at iteration ~200; correlated with sustained 100% CPU on the recommender service per Grafana panel link" is.


Reference index

Files

references/functional-tests.md

Building functional tests

Per workflow, you produce two functional tests:

  • protocol.js — single-iteration, single-VU, hand-cleaned from from-har.js. Uses expect() for hard assertions.

  • browser.js — single-iteration, single-VU, hand-converted from the Playwright recorder. Uses expect() for hard assertions.

Both must pass via ./tests/run-all.sh before any load test runs.

Contents

  • protocol.js — cleaning from-har.js

    • Step 1: Move User-Agent to options.userAgent

    • Step 2: Rename the group

    • Step 3: Parameterise the base URL

    • Step 4: Replace recorded credentials with test credentials

      • Cookies, CSRF, and k6's CookieJar API — r.cookies vs r.json(); jar: vs cookies: footgun

    • Step 5: Drop the auto-inserted sleep(1)

    • Step 6: Add expect() on every load-bearing response

    • Why hard assertions in functional tests but check() in load tests

  • browser.js — 5-step Playwright → k6/browser conversion

    • Step 1: Replace imports

    • Step 2: Replace launch/context setup with browser.newPage()

    • Step 3: Keep the page-interaction body verbatim

    • Step 4: Replace expect (Playwright) with k6-testing expect

    • Step 4.5: newPage() vs newContext().newPage() — when to reach for context-level control

    • Step 5: Wrap in try / finally

  • Running functional tests

  • What "passing" means

protocol.js: cleaning from-har.js

har-to-k6 produces a verbatim transcript of the HAR. It is not suitable as a maintainable test. Apply these cleanups:

1. Move User-Agent to options.userAgent

har-to-k6 sets User-Agent, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform on every request. Drop them; set the UA once:

const USER_AGENT =
  'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 ' +
  '(KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36';

export const options = {
  vus: 1,
  iterations: 1,
  userAgent: USER_AGENT,
};

The UA must be a real Chrome string. Headless UAs trigger bot-blocking.

2. Rename the group

har-to-k6 names the group from the HAR's _pageref, which is opaque (page_0, page_1, …). Replace with a descriptive name:

group('w1-login-then-purchase', function () { /* ... */ });
3. Parameterise the base URL
const BASE_URL = __ENV.BASE_URL || 'https://target-host.example';

Replace every absolute URL in from-har.js with ${BASE_URL}/path.

4. Replace recorded credentials with test credentials

If the HAR contains a session cookie or bearer token, replace it with:

  • A well-known test token (e.g. __ENV.TEST_TOKEN).

  • Or a login step at the top of the iteration body.

Do not commit recorded credentials. The HAR captures the live session; treat it like a secret. The cleanup step is where this data becomes safe to commit.

Cookies, CSRF, and k6's CookieJar API

k6 has two distinct cookie surfaces that are easy to confuse. Get them wrong and your authenticated workflow looks like it works but actually replays no session at all.

Reading cookies the server set: response cookies are on the r.cookies object, keyed by name, valued as an array of cookie records. A common CSRF pattern is the server returning an empty body but setting a csrf_token cookie:

// WRONG — reads from JSON body, which is empty.
const r = http.post(`${BASE_URL}/api/csrf-token`);
const csrf = r.json('csrf_token');     // undefined

// RIGHT — read the Set-Cookie value.
const r = http.post(`${BASE_URL}/api/csrf-token`);
const csrf = r.cookies.csrf_token && r.cookies.csrf_token[0].value;

Storing cookies across requests (login → authenticated requests):

By default k6 maintains a per-VU global cookie jar, automatically. For a normal logged-in workflow you don't need to do anything — just hit POST /login, then make subsequent requests on the same VU, and the session cookie is carried.

If you do need an explicit jar (e.g. multiple parallel users in one VU), the per-request option name is jar:, not cookies::

// WRONG — `cookies` expects a name→value object, not a jar. k6 ignores
// the jar here, so the request silently uses the default per-VU jar.
const jar = new http.CookieJar();
http.get(url, { cookies: jar });

// RIGHT — use jar:, or just rely on the default per-VU jar.
const jar = new http.CookieJar();
http.get(url, { jar });

Sending a CSRF token that arrived via cookie:

http.post(`${BASE_URL}/api/rate`, body, {
  headers: {
    'Content-Type': 'application/json',
    'X-CSRF-Token': csrf,        // pulled from r.cookies.csrf_token[0].value
  },
});

Verify the contract works in your protocol.js smoke run before trusting it under load — silent CSRF-missing 403s are a classic way to discover the issue only on stress day.

5. Drop the auto-inserted sleep(1)

har-to-k6 adds sleep(1) at the end of the iteration. Functional tests are single-iteration; remove it.

6. Add expect() on every load-bearing response
import { expect } from 'https://jslib.k6.io/k6-testing/0.5.0/index.js';

// Status assertion on every static asset (so a hash-renamed bundle
// after a rebuild fails the test loudly rather than silently 404):
for (const [kind, path] of assets) {
  const res = http.get(`${BASE_URL}${path}`, { /* ... */ });
  expect(res.status, `asset ${path}`).toBe(200);
}

// Body-shape assertion on the load-bearing response:
expect(res.status).toBe(200);
const data = res.json('result');
expect(data).not.toBeNull();
expect(typeof data.id).toBe('string');
expect(data.id.length).toBeGreaterThan(0);

Rule of thumb: every http.* call gets at least a status expect(). The response that carries the workflow's payload gets additional body-shape assertions.

Why hard assertions in functional tests but check() in load tests
Functional testLoad test
expect() aborts iteration on failurecheck() records a metric
Single iteration → abort = failed testMany iterations → don't poison run
Used to validate the script is correctUsed to measure under load

In the load script you'll also add tags: { name: 'EndpointName' } to each request for per-endpoint thresholds (see slo-design.md).

browser.js: 5-step conversion from Playwright recorder

The body of the Playwright recorder is the body of the k6/browser default function, modulo framework scaffolding.

Step 1: Replace imports
// Recorder:
const { chromium } = require('playwright');

// k6/browser:
import { browser } from 'k6/browser';
import { expect } from 'https://jslib.k6.io/k6-testing/0.5.0/index.js';
Step 2: Replace launch / context setup with browser.newPage()
// Recorder:
const browser = await chromium.launch({ headless: true });
const context = await browser.newContext({ /* ... */ });
const page = await context.newPage();

// k6/browser:
export const options = {
  scenarios: {
    wN_<short_name>: {
      executor: 'shared-iterations',
      vus: 1, iterations: 1,
      options: { browser: { type: 'chromium' } },
    },
  },
};

export default async function () {
  const page = await browser.newPage();
  try {
    // ... body ...
  } finally {
    await page.close();
  }
}
Step 3: Keep the page-interaction body verbatim

The Playwright page.* API is the same in k6/browser. page.goto, page.locator, page.waitForResponse, Promise.all(...), all work identically.

The hydration-signal wait you used in the recorder transfers verbatim — keep it.

Step 4: Replace expect (Playwright) with k6-testing expect
// Recorder (Playwright):
import { expect } from '@playwright/test';
await expect(button).toBeVisible();

// k6/browser:
import { expect } from 'https://jslib.k6.io/k6-testing/0.5.0/index.js';
await expect(button).toBeVisible();

The k6-testing expect() API is a deliberate subset of Playwright's expect() — most assertions transfer 1:1. toBeVisible, toContainText, toHaveText, toBeEnabled, etc. all work.

Step 4.5: newPage() vs newContext().newPage()

The templates use browser.newPage() because it's the right default for stateless iterations — each iteration gets a fresh page, and k6 does NOT share cookies between iterations of the same VU when you call browser.newPage(). For 99% of workflow tests this is what you want.

Use browser.newContext() first if your test specifically needs:

  • A custom user agent or locale per iteration that overrides the global options.userAgent.

  • Cookies preloaded into the browser before navigation (e.g. testing a partially-authenticated state without going through the login UI).

  • Explicit cookie isolation in a scenario that creates multiple pages per iteration — newContext() is the boundary in that case.

// Default (recommended):
const page = await browser.newPage();

// Only when you need context-level control:
const context = await browser.newContext({ userAgent: '...', locale: 'en-GB' });
const page = await context.newPage();
try {
  // ...
} finally {
  await page.close();
  await context.close();   // also close the context
}

Don't reach for newContext() "just to be safe" — it adds complexity and the cleanup ordering matters. Stick with newPage() unless one of the cases above applies.

Step 5: Wrap in try / finally
export default async function () {
  const page = await browser.newPage();
  try {
    // ... body ...
  } finally {
    await page.close();   // always close the page; resource leak otherwise
  }
}

In the load-test versions (e.g. smoke.js, average.js), the wrapper expands to try / catch / finally with an iteration_completed Rate — see slo-design.md.

Running functional tests

# All workflows, both kinds:
./tests/run-all.sh

# Just one:
k6 run tests/wN-<short-name>/protocol.js
K6_BROWSER_HEADLESS=true k6 run tests/wN-<short-name>/browser.js

run-all.sh writes per-test logs to ${TMPDIR}/k6-run-all/ so a failure can be drilled in.

Exit code = failure count. Treat any non-zero exit as "do not proceed to load testing".

What "passing" means

For protocol tests: every expect() resolves true. k6 prints ✓ all checks passed. Exit code 0.

For browser tests: same, plus the test ran headless without crashing the chromium process. If k6 reports the iteration "interrupted", investigate before treating the test as flaky.

Requirements and compatibility

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Needs: Needs Node.js

Security

What our scanner noticed· Low risk

  • Scripts that your agent may run

This skill includes scripts that your agent may run. Read them before you use it.

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Attribution and licence

Published by
Grafana Labs
Publisher
Grafana Labs (Official)
Source
grafana/skills · skills/grafana-k6/k6-perf-test-website · commit 8fb72a5
Licence
Apache License 2.0 (redistribution allowed)
  • LICENSE (added by AutoGineer from LICENSE)
  • ATTRIBUTION.md (written by AutoGineer)
Synced

AutoGineer is not affiliated with or endorsed by Grafana Labs or Grafana Labs.

Download ZIP

The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download k6-perf-test-website.zip