Skills fullstack-dev

📦

fullstack-dev

Name: fullstack-dev
Author: MiniMax-AI

v1.0.0 Content revision r1 Medium Risk ⚙️ External commands🌐 Network access🔑 Env variables📁 Filesystem access

Build Full-Stack App Backends

Full-stack projects fail when backend structure, API contracts, auth, and deployment checks are improvised. This skill gives practical architecture patterns and checklists for building maintainable apps with Claude, Codex, or Claude Code.

Supports: Claude Codex Code(CC)

📊 68 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "fullstack-dev" from https://skillstore.io/skills/minimax-ai-fullstack-dev.md and its manifest at https://skillstore.io/api/skills/minimax-ai-fullstack-dev/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/minimax-ai-fullstack-dev.md Signed manifest GET /api/skills/minimax-ai-fullstack-dev/manifest Signed lockfile GET /api/skills/minimax-ai-fullstack-dev/lockfile

Test it

Using "fullstack-dev". Design a todo app with React and Express.

Expected outcome:

A decision summary, feature-first folder plan, endpoint list, validation approach, auth choice, API client plan, and verification checklist.

Using "fullstack-dev". Review this backend for production readiness.

Expected outcome:

Architecture gaps by severity
Missing tests and release gates
Configuration and secret handling issues
Concrete next steps

Using "fullstack-dev". Add real-time updates to this dashboard.

Expected outcome:

A recommendation between polling, SSE, and WebSocket, with backend responsibilities, frontend state handling, and smoke-test steps.

Security Audit

Medium Risk

v5 • 7/5/2026 Open versioned report

Static analysis flagged many high-risk patterns, but review shows they are Markdown examples for full-stack development rather than executable marketplace code. No prompt injection, credential exfiltration, or automatic remote command behavior was found. One medium-risk semantic issue remains in the file upload example because a request filename is used to build an object key.

Files scanned

3,841

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

SKILL.md:713-716

Unsanitized Upload Filename in Presigned URL Example

The upload example uses req.query.filename directly when composing an S3 object key. This can teach path manipulation or unexpected object names in user projects.

The snippet directly reads filename from req.query and appends it to an object key. The risk is instructional, not active execution by the skill.

Risk Factors

⚙️ External commands (130)

references/api-design.md:204-211 references/api-design.md:236-241 references/auth-flow.md:75-76 references/auth-flow.md:76-81 references/testing-strategy.md:71-89 references/testing-strategy.md:89-95 references/testing-strategy.md:292-296 SKILL.md:72-77 SKILL.md:77-79 SKILL.md:79-83 SKILL.md:83-122 SKILL.md:122-128 SKILL.md:128 SKILL.md:130-132 SKILL.md:132-142 SKILL.md:142-173 SKILL.md:173-181 SKILL.md:181-189 SKILL.md:189-204 SKILL.md:204-208 SKILL.md:208-210 SKILL.md:210-221 SKILL.md:221-228 SKILL.md:228-231 SKILL.md:231-236 SKILL.md:236-239 SKILL.md:239-248 SKILL.md:248-257 SKILL.md:257-266 SKILL.md:266-269 SKILL.md:269-272 SKILL.md:272-284 SKILL.md:284-288 SKILL.md:288-297 SKILL.md:297-305 SKILL.md:305-317 SKILL.md:317-325 SKILL.md:325-327 SKILL.md:327-336 SKILL.md:336-340 SKILL.md:340-352 SKILL.md:352-356 SKILL.md:356-366 SKILL.md:366-374 SKILL.md:374-378 SKILL.md:378-380 SKILL.md:380-385 SKILL.md:385-389 SKILL.md:389-396 SKILL.md:396-400 SKILL.md:400-406 SKILL.md:406-410 SKILL.md:410-420 SKILL.md:420-426 SKILL.md:426-433 SKILL.md:433-437 SKILL.md:437-458 SKILL.md:458-462 SKILL.md:462-497 SKILL.md:497-501 SKILL.md:501-520 SKILL.md:520-524 SKILL.md:524-529 SKILL.md:529-549 SKILL.md:549-552 SKILL.md:552-556 SKILL.md:556-563 SKILL.md:563-567 SKILL.md:567-576 SKILL.md:576-580 SKILL.md:580-597 SKILL.md:597-605 SKILL.md:605-614 SKILL.md:614-615 SKILL.md:615-628 SKILL.md:628-633 SKILL.md:633-641 SKILL.md:641-648 SKILL.md:648-652 SKILL.md:652-659 SKILL.md:659-667 SKILL.md:667-669 SKILL.md:669-675 SKILL.md:675-678 SKILL.md:678-682 SKILL.md:682-688 SKILL.md:688-703 SKILL.md:703-708 SKILL.md:708-711 SKILL.md:711-714 SKILL.md:714-721 SKILL.md:721-724 SKILL.md:724-727 SKILL.md:727-732 SKILL.md:732-736 SKILL.md:736-743 SKILL.md:743-762 SKILL.md:762-770 SKILL.md:770-777 SKILL.md:777-780 SKILL.md:780-783 SKILL.md:783-791 SKILL.md:791-798 SKILL.md:798-810 SKILL.md:810-813 SKILL.md:813-825 SKILL.md:825-829 SKILL.md:829-833 SKILL.md:833-840 SKILL.md:840-856 SKILL.md:856-878 SKILL.md:878-882 SKILL.md:882-894 SKILL.md:894-898 SKILL.md:898-908 SKILL.md:908-912 SKILL.md:912-937 SKILL.md:937-945 SKILL.md:945-954 SKILL.md:954-958 SKILL.md:958-966 SKILL.md:966-970 SKILL.md:970-977 SKILL.md:977-986 SKILL.md:986-987 SKILL.md:987-988 SKILL.md:988-992 SKILL.md:992 SKILL.md:995-1016 SKILL.md:1016

🌐 Network access (35)

🔑 Env variables (25)

📁 Filesystem access (1)

SKILL.md:705

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/minimax-ai-fullstack-dev/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/minimax-ai-fullstack-dev/security.svg)](https://skillstore.io/skills/minimax-ai-fullstack-dev?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/minimax-ai-fullstack-dev?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/minimax-ai-fullstack-dev/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/minimax-ai-fullstack-dev.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

MiniMax-AI. (2026). fullstack-dev security audit report (audit version 5) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/minimax-ai-fullstack-dev/audits/5

BibTeX citation

@techreport{minimax-ai-minimax-ai-fullstack-dev-2026,
  author = {MiniMax-AI},
  title = {fullstack-dev security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/minimax-ai-fullstack-dev/audits/5},
  note = {Author version 1.0.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "fullstack-dev security audit report (audit version 5)"
version: "1.0.0"
type: report
authors:
  - name: "MiniMax-AI"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/minimax-ai-fullstack-dev/audits/5"
identifiers:
  - type: other
    value: "skillstore:minimax-ai-fullstack-dev:audit:5"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Scaffold a Product API

Create backend structure, health checks, configuration, validation, and an API client plan for a new app.

Standardize Service Architecture

Review an existing service and align controllers, services, repositories, errors, logging, and configuration.

Prepare a Production Release

Use testing, environment, auth, CORS, and release checklists before deploying a full-stack feature.

Try These Prompts

Plan a Basic CRUD App

Use this skill to design a small CRUD app with a REST API, database, auth, and frontend API client. State the architecture decisions before code.

Add Auth to an Existing App

Use this skill to add login, refresh tokens, protected routes, CORS, and frontend request handling to my existing full-stack app.

Review Backend Structure

Use this skill to review my backend module boundaries, service layer, repository layer, error handling, logging, and environment configuration.

Design a Production Service

Use this skill to design a production-ready service with typed APIs, tests, observability, caching, background jobs, release gates, and rollback notes.

Best Practices

State the stack, database, API style, auth strategy, and real-time needs before implementation.
Validate configuration, input, errors, and authentication at clear boundaries.
Run build, smoke, integration, and release checks before handoff.