Skills senior-backend

📦

senior-backend

Name: senior-backend
Author: davila7

Content revision r1 Safe 📁 Filesystem access⚙️ External commands

Build Scalable Backend Services

Backend teams need structured guidance for APIs, migrations, security, and performance. This skill provides references and helper scripts for planning, scaffolding, and reviewing backend work.

Supports: Claude Codex Code(CC)

🥈 81 Silver

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "senior-backend" from https://skillstore.io/skills/davila7-senior-backend.md and its manifest at https://skillstore.io/api/skills/davila7-senior-backend/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/davila7-senior-backend.md Signed manifest GET /api/skills/davila7-senior-backend/manifest Signed lockfile GET /api/skills/davila7-senior-backend/lockfile

Test it

Using "senior-backend". A team asks for review of a new payment API before implementation.

Expected outcome:

A prioritized review of endpoint structure, validation gaps, authorization checks, idempotency needs, and database transaction concerns.

Using "senior-backend". A developer wants to improve a slow migration before release.

Expected outcome:

A risk-focused migration review covering lock duration, rollback options, batching, indexes, and monitoring signals.

Using "senior-backend". A platform lead needs readiness guidance for a new backend service.

Expected outcome:

A deployment readiness checklist covering tests, load results, logs, rollback steps, and service ownership.

Security Audit

Safe

v13 • 7/9/2026 Open versioned report

Most static command findings in SKILL.md are Markdown examples or inline file names, not executable backtick code. The three helper scripts perform user-directed filesystem writes through --output, and several documented command blocks can alter local or deployment environments if followed without review. No prompt injection, network exfiltration, or malicious intent was found in the reviewed files.

Files scanned

867

Lines analyzed

Review items

False positives ignored

Capability review items (10)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

scripts/api_load_tester.py:107

Python file write/append

with open(args.output, 'w') as f:

The script writes JSON results to args.output with a caller supplied path. This can overwrite arbitrary writable files if used carelessly, although it requires explicit --output.

Medium

scripts/api_scaffolder.py:107

Python file write/append

with open(args.output, 'w') as f:

The script writes JSON results to args.output with a caller supplied path. This can overwrite arbitrary writable files if used carelessly, although it requires explicit --output.

Medium

scripts/database_migration_tool.py:107

Python file write/append

with open(args.output, 'w') as f:

The script writes JSON results to args.output with a caller supplied path. This can overwrite arbitrary writable files if used carelessly, although it requires explicit --output.

Medium

SKILL.md:16-25

Ruby/shell backtick execution

```bash

The matched Markdown block instructs users or agents to run local Python helper scripts. These are legitimate examples, but they trigger external command execution on the local project if followed.

Medium

SKILL.md:40-42

Ruby/shell backtick execution

```bash

This Markdown usage block tells users to run the API scaffolder script. It is a local script invocation, so it can execute code from the skill when followed.

Medium

SKILL.md:55-57

Ruby/shell backtick execution

```bash

This Markdown usage block tells users to run the database migration helper. It is legitimate local tooling but still executes code from the skill.

Medium

SKILL.md:70-72

Ruby/shell backtick execution

```bash

This Markdown usage block instructs running the API load tester helper. It is local script execution and should remain user-confirmed.

Medium

SKILL.md:119-127

Ruby/shell backtick execution

```bash

The setup block includes package installation and file copy commands. These can modify local dependencies and configuration if an agent runs them without confirmation.

Medium

SKILL.md:131-137

Ruby/shell backtick execution

```bash

The quality-check block invokes a local database migration helper against the current project. It executes local skill code and should be confirmed before running.

Medium

SKILL.md:174-189

Ruby/shell backtick execution

```bash

The common commands block includes package, container, and cluster management commands. Those commands can alter dependencies, containers, or cluster state if run blindly.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/davila7-senior-backend/audits/13?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/davila7-senior-backend/security.svg)](https://skillstore.io/skills/davila7-senior-backend?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/davila7-senior-backend?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/davila7-senior-backend/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/davila7-senior-backend.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

davila7. (2026). senior-backend security audit report (audit version 13) [Author version unspecified]. Skillstore. https://skillstore.io/skills/davila7-senior-backend/audits/13

BibTeX citation

@techreport{davila7-davila7-senior-backend-2026,
  author = {davila7},
  title = {senior-backend security audit report (audit version 13)},
  institution = {Skillstore},
  year = {2026},
  number = {13},
  url = {https://skillstore.io/skills/davila7-senior-backend/audits/13},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "senior-backend security audit report (audit version 13)"
version: "unspecified"
type: report
authors:
  - name: "davila7"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/davila7-senior-backend/audits/13"
identifiers:
  - type: other
    value: "skillstore:davila7-senior-backend:audit:13"
    description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

alirezarezvani Recommended

alirezarezvani-senior-backend

Skillstore Score 82

Evidence Confidence High

Skillstore usage 29

Updated

2026-08-21

davila7 Current

davila7-senior-backend

Skillstore Score 81

Evidence Confidence High

Skillstore usage 54

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Plan API Architecture

Compare REST and GraphQL patterns, define service boundaries, and document backend decisions before implementation.

Review Database Changes

Inspect migrations, indexes, query paths, and performance risks before release.

Prepare Backend Delivery

Combine scaffolding, security checklists, and quality commands to standardize backend delivery.

Try These Prompts

Review an API Plan

Review this backend API plan. Identify endpoint design issues, missing validation, security risks, and database concerns. Keep recommendations actionable.

Improve a Migration

Review this migration proposal. Check data safety, rollback strategy, indexing, lock risks, and performance impact. Suggest safer alternatives.

Design Backend Security

Create a backend security review for this service. Cover authentication, authorization, input validation, secret handling, audit logging, and dependency risks.

Assess Production Readiness

Assess this backend service for production readiness. Include API reliability, database performance, load testing, observability, deployment risk, and operational runbooks.

Best Practices

Run helper scripts only after reviewing the target path and output path.
Pair generated guidance with project-specific tests, profiling, and threat modeling.
Confirm infrastructure commands with the responsible team before applying changes.

Avoid

Running deployment commands against shared infrastructure without approval.
Treating placeholder script findings as complete production analysis.
Changing authentication, authorization, or data access without a focused security review.