backend-api
Build RESTful Backend APIs
Backend API work often stalls on routing, versioning, and response standards. This skill guides Claude, Codex, and Claude Code through consistent REST endpoint design and implementation.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "backend-api" from https://skillstore.io/skills/devanb-backend-api.md and its manifest at https://skillstore.io/api/skills/devanb-backend-api/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "backend-api". Create a users listing endpoint.
Expected outcome:
- Use a GET collection endpoint for the users resource.
- Return a success status when the request is valid.
- Support pagination and optional filters before adding custom search behavior.
Using "backend-api". Review versioning for order endpoints.
Expected outcome:
The review would compare path and header versioning, flag inconsistent route names, and recommend a single versioning pattern.
Using "backend-api". Add rate limiting guidance to an API plan.
Expected outcome:
The output would define throttling expectations, response headers, and error behavior for requests that exceed the limit.
Security Audit
SafeFour external command findings are false positives because they are Markdown inline code formatting for routes and paths. The filesystem finding is confirmed because SKILL.md points to ../../../agent-os/standards/backend/api.md, which directs the agent outside the skill package. No prompt injection or malicious data-exfiltration intent was found.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (4)
📁 Filesystem access (1)
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/devanb-backend-api/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/devanb-backend-api?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/devanb-backend-api?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/devanb-backend-api/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/devanb-backend-api.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
DevanB. (2026). backend-api security audit report (audit version 10) [Author version unspecified]. Skillstore. https://skillstore.io/skills/devanb-backend-api/audits/10BibTeX citation
@techreport{devanb-devanb-backend-api-2026,
author = {DevanB},
title = {backend-api security audit report (audit version 10)},
institution = {Skillstore},
year = {2026},
number = {10},
url = {https://skillstore.io/skills/devanb-backend-api/audits/10},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "backend-api security audit report (audit version 10)"
version: "unspecified"
type: report
authors:
- name: "DevanB"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/devanb-backend-api/audits/10"
identifiers:
- type: other
value: "skillstore:devanb-backend-api:audit:10"
description: "Skillstore immutable audit report identifier"
Compare variants
2 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
devanb-backend-api
2026-08-21
eis-its-backend-api
2026-08-21
Skillstore Score
Why this score Evidence Confidence: HighWhat You Can Build
Create REST Endpoints
Plan routes, controllers, HTTP methods, and response codes for new backend resources.
Standardize API Responses
Align pagination, filtering, sorting, errors, and resource formatting across endpoints.
Review API Changes
Check endpoint design for REST conventions, versioning choices, and throttling expectations.
Try These Prompts
Design a REST endpoint for this resource. Include the route purpose, HTTP method, controller action, expected status codes, and response shape.
Add filtering, sorting, pagination, and search behavior to this API endpoint. Explain the query parameters and validation rules.
Plan versioning for this API resource. Compare URL path versioning and header-based versioning, then recommend one approach.
Review these API routes and controllers for REST conventions, versioning, status codes, pagination, and rate limiting. List prioritized fixes with rationale.
Best Practices
- Keep resource names consistent and use standard HTTP methods for each action.
- Define pagination, filtering, sorting, and search behavior before implementation.
- Map success and error paths to clear HTTP status codes.
Avoid
- Mixing custom verbs into URLs when standard HTTP methods already describe the action.
- Returning generic success or error codes that hide the real request outcome.
- Adding versioning, filtering, or throttling behavior differently for each endpoint.