fullstack-dev
Build production-ready full-stack applications
Building full-stack applications requires coordinating backend APIs, authentication, databases, and frontend integration. This skill provides a structured workflow and best practices for creating robust, production-ready applications with proper error handling and testing.
Download the skill ZIP
Upload in Claude
Go to Settings → Capabilities → Skills → Upload skill
Toggle on and start using
Test it
Using "fullstack-dev". Build a todo API with Express and React frontend
Expected outcome:
Created full-stack todo application with Express backend (JWT auth, PostgreSQL) and React frontend. Backend includes /api/todos CRUD endpoints, /api/auth/login with refresh token flow, and proper error handling. Frontend includes TodoApp component with API client wrapper that handles 401 automatic refresh.
Using "fullstack-dev". Add SSE real-time updates to existing Node.js app
Expected outcome:
Implemented Server-Sent Events in existing Express app. Created /api/events endpoint with connection management, added client-side EventSource integration, and handled reconnection with exponential backoff. Frontend displays live updates without manual refresh.
Security Audit
Medium RiskScanned 9 files (3841 lines). Static analyzer flagged 721 potential issues but most are false positives. All flagged patterns are in markdown documentation showing legitimate code examples for build/test commands, auth flows, and config patterns. No malicious intent found. Skill is safe for publication with standard warnings.
High Risk Issues (1)
Medium Risk Issues (3)
Low Risk Issues (3)
Risk Factors
⚙️ External commands (5)
🌐 Network access (5)
🔑 Env variables (4)
📁 Filesystem access (1)
Detected Patterns
Quality Score
What You Can Build
Scaffolding a new full-stack application
When starting a new project, use the mandatory workflow to define stack, architecture, and auth strategy before writing any code. This ensures all components work together from the start.
Adding authentication to an existing API
Integrate JWT bearer flow with automatic token refresh into existing Express or Django APIs. Follow the auth middleware ordering patterns to ensure proper protection.
Implementing real-time updates
Add Server-Sent Events or WebSocket support to existing applications for live notifications, collaborative features, or dashboard updates without polling overhead.
Try These Prompts
Build a new full-stack application using {backend_stack} and {frontend_stack}. I need REST API endpoints for {resource_name} with CRUD operations, JWT authentication, and proper error handling.Add JWT authentication to my existing {framework} API. Include login/logout endpoints, access token (15min) and refresh token (7d httpOnly cookie) flow, and middleware to protect existing routes.Add real-time notifications to my application using {sse_or_websocket}. Users should receive updates when {event_type} happens without page refresh.Design a database schema for {domain} with {table_count} tables. Include proper indexes for common queries, foreign key relationships, and migration scripts for {db_type}.Best Practices
- Always define architectural decisions (stack, API style, auth strategy) before writing code - document these in a decisions.json file
- Implement error handling with typed error hierarchies - never expose raw error messages to clients in production
- Use the mandatory verification workflow - run build checks, smoke tests, and integration tests before claiming completion
Avoid
- Do not skip authentication middleware ordering - always validate JWT before checking permissions, not after
- Avoid hardcoding URLs or credentials in code - use environment variables with validation at startup
- Do not implement real-time features with polling when SSE or WebSocket is more appropriate - polling wastes resources