Backend engineering
Skill vignesh2027/AI-AGENT-SKILLS/skills/backend-engineering
Turn your ai agent into senior engineer..The result is fast code that fails slowly. AI Agent Skills solves this by giving agents the same disciplined workflows senior engineers use
npx -y skills add vignesh2027/AI-AGENT-SKILLS --skill backend-engineeringAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Design services that are reliable, observable, secure, and maintainable
SKILL.md
2.4 KB, as published. Nobody here has run it
Overview
Backend services are the load-bearing walls of software systems. They must be reliable under partial failure, observable in production, and secure against malicious input. This skill applies the engineering discipline required for production-grade services.
When to Use
- Before implementing a new service or significant backend feature
- When a service has reliability, performance, or security issues
- As part of the
/reviewworkflow for backend PRs
Process
Step 1: Define the contract
Document: endpoints/methods, request/response schemas, error codes, authentication requirements, rate limits. No implementation before the contract is defined.
Step 2: Design for failure
Every outbound call must have: timeout, retry with backoff, circuit breaker, fallback. Services that don't handle dependency failures will fail when their dependencies fail.
Step 3: Input validation at the boundary
Validate all incoming data before processing: types, required fields, length limits, format constraints. Reject invalid input — don't try to fix it.
Step 4: Idempotency for mutations
All write operations should be idempotent where possible. Use idempotency keys for payment and other sensitive operations.
Step 5: Database access
- No N+1 queries
- Transactions for operations that must be atomic
- Read replicas for read-heavy workloads
- Connection pooling configured
Step 6: Logging and observability
Implement structured logging, metrics (four golden signals), and distributed tracing. See observability-and-monitoring.
Step 7: Security
- Authenticate every request
- Authorize every resource access
- Validate all inputs
- No secrets in logs or responses
See
security-and-hardening.
Step 8: Graceful shutdown
Handle: SIGTERM, drain in-flight requests, close database connections, flush logs. Services that don't handle graceful shutdown cause errors during deployments.
Verification Requirements
- Contract documented before implementation
- All outbound calls have timeout and retry
- Input validation at the service boundary
- No N+1 queries
- Authentication and authorization on every request/resource
- Graceful shutdown implemented
- Four golden signals instrumented