backend-dev-guidelines
应用后端开发最佳实践
Também disponível em: Dimon94,BrianDai22,sickn33,DojoCodingLabs
使用经过验证的 Node.js/Express/TypeScript 模式创建一致、可维护的后端服务。本技能提供架构指导、代码模板和面向微服务开发的安全模式。
Baixar o ZIP da skill
Upload no Claude
Vá em Configurações → Capacidades → Skills → Upload skill
Ative e comece a usar
Testar
A utilizar "backend-dev-guidelines". Create a POST /posts endpoint with authentication
Resultado esperado:
- Complete route definition with SSO middleware
- BaseController with breadcrumb tracking
- PostService with dependency injection
- PostRepository with Prisma queries
- Zod validation schema for post data
- Error handling with Sentry capture
A utilizar "backend-dev-guidelines". Convert legacy callback code to async/await
Resultado esperado:
- Updated service methods with try/catch
- AsyncErrorWrapper utility usage
- Sentry error capture integration
- Promise.all() for parallel operations
- Proper error propagation to controller
A utilizar "backend-dev-guidelines". Add input validation to existing endpoint
Resultado esperado:
- Zod schema definition with type inference
- Validation in controller before service call
- 400 status code on validation failure
- Error details in response
- Test cases for invalid input
Auditoria de Segurança
SeguroAll 555 static findings are FALSE POSITIVES. This is a documentation/guide skill containing educational code examples. The detected patterns (shell commands, environment variables, path traversal, crypto algorithms) are in markdown code blocks demonstrating best practices and anti-patterns. The skill actively promotes secure coding - it teaches AGAINST vulnerabilities like path traversal and weak cryptography, not exploits them.
Fatores de risco
⚙️ Comandos externos (2)
🔑 Variáveis de ambiente (2)
📁 Acesso ao sistema de arquivos (2)
Pontuação de qualidade
O Que Você Pode Construir
新功能实现
为新的 API 端点按照架构模式生成控制器、服务和仓储代码。
代码库标准化
通过 BaseController 和 unifiedConfig 使用，在多个微服务中建立一致的模式。
Express API 开发
使用适当的中间件、验证和错误跟踪集成构建 Express 路由。
Tente Estes Prompts
Create a new /users/:id endpoint with UserController that extends BaseController, includes Zod validation, and proper error handling with Sentry.
Generate a UserService with dependency injection pattern, including repository calls and async error handling wrapper.
Create a UserRepository pattern with PrismaService usage, transaction support, and query optimization examples.
Generate complete feature with routes, BaseController, service with DI, repository layer, Zod validation schemas, and Jest tests.
Melhores Práticas
- 使用分层架构：路由委托给控制器，控制器调用服务，服务使用仓储。
- 始终扩展 BaseController 以获得一致的错误处理、面包屑跟踪和 Sentry 集成。
- 在业务逻辑之前使用 Zod 模式验证所有输入 - 尽早拒绝无效数据。
Evitar
- 永远不要在路由处理程序中放置业务逻辑 - 委托给控制器。
- 永远不要直接使用 process.env - 使用 unifiedConfig 以获得类型安全和可测试性。
- 永远不要跳过错误处理 - 所有异步操作都需要带有 Sentry 捕获的 try/catch。