搜索
搜索结果
82 results for "backend api"
quarkus-patterns
Quarkus 3.x LTS architecture patterns with Camel for messaging, RESTful API design, CDI services, data access with Panache, and async processing. Use for Java Quarkus backend work with event-driven architectures. Use when building or reviewing a Quarkus service, especially with Camel messaging or Panache data access.
affaan-mspringboot-patterns
Spring Boot architecture patterns, REST API design, layered services, data access, caching, async processing, and logging. Use for Java Spring Boot backend work.
affaan-mbackend-patterns
Backend architecture patterns, API design, database optimization, and server-side best practices for Node.js, Express, and Next.js API routes.
affaan-mquarkus-patterns
Quarkus 3.x LTS 架构模式指南。涵盖基于 Camel 的消息传递、RESTful API 设计、CDI 服务、Panache 数据持久化及异步处理，适用于基于事件驱动架构的 Java Quarkus 后端开发。
affaan-mspringboot-patterns
Spring Boot 架构模式、REST API 设计、分层服务、数据访问、缓存、异步处理和日志记录。适用于 Java Spring Boot 后端工作。
affaan-mbackend-patterns
后端架构模式、API设计、数据库优化以及Node.js、Express和Next.js API路由的服务器端最佳实践。
affaan-m
backend-code-review
Use only when the user explicitly requests a review or audit of backend code under `api/`. Supports pending-change, file-focused, and pasted-diff reviews. Do not use for implementation-only requests, diagnosis without review intent, frontend code, or backend code outside `api/`.
langgenius
api-and-interface-design
指导稳定的 API 和接口设计。适用于设计 API、模块边界或任何公共接口。适用于创建 REST 或 GraphQL 端点、定义模块间的类型契约，或建立前后端之间的边界。
addyosmani
api-security-testing
Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-specific vulnerability classes in the OWASP API Security Top 10 (2023) — broken object-level authorization (BOLA/IDOR), broken object property level authorization (excessive data exposure and mass assignment), broken function-level authorization, unrestricted resource consumption, SSRF, injection, and auth/token flaws. Every finding comes with a working proof-of-concept request. Use when the user asks to pentest, security-test, audit, or find vulnerabilities in an API, endpoint, or backend service.
usestrix
backend-architect
Expert backend architect specializing in scalable API design, microservices architecture, and distributed systems.
sickn33
web-coder
精通 Web 开发、网络协议和 Web 标准的 10x 全栈专家。当涉及 HTML、CSS、JavaScript、Web API、HTTP/HTTPS、Web 安全、性能优化、无障碍设计（Accessibility）或任何 Web/互联网相关概念时使用此 Skill。擅长精准解读 Web 专业术语，并在前后端开发中落地现代 Web 标准。
github
cmux-backend
cmux 的后端 TypeScript 与云端虚拟机（Cloud VM）开发规范。适用于修改 web/app/api、web/services、后端脚本、云端 VM 生命周期、云厂商集成、Postgres、Stack Auth 付费门槛限制、数据库迁移（migrations）以及云厂商镜像构建脚本等场景。
manaflow-ai
baoyu-danger-gemini-web
通过逆向工程实现的 Gemini Web API 生成图像和文本。支持文本生成、根据提示生成图像、用于视觉输入的参考图像以及多轮对话。当其他技能需要图像生成后端，或用户请求“使用 Gemini 生成图像”、“Gemini 文本生成”，或需要具备视觉能力的 AI 生成时使用。
jimliu
iii-architecture-patterns
Use when composing iii primitives into backend architectures: durable workflows, reactive backends, agentic pipelines, event-driven CQRS, effect pipelines, and trigger-transform-action automation.
iii-hqiii-core-primitives
Use when registering iii functions, binding triggers, selecting sync/void/enqueue invocation, creating workers, inspecting the live worker registry, installing registry workers, authoring custom triggers, moving channel data, or adapting external HTTP functions across TypeScript, Python, and Rust.
iii-hqiii-sdk-reference
Use when working with iii SDK APIs across Node.js, browser, Python, or Rust: package installation, worker initialization, function/trigger registration, invocation, channels, logging, OpenTelemetry, and language-specific caveats.
iii-hqiii-error-handling
Handle iii engine and SDK errors across Node, Python, Rust, and browser workers. Use when interpreting error codes, retryability, RBAC denial, timeouts, handler failures, or SDK-specific exception surfaces.
iii-hqiii-engine-config
Configures the iii engine via iii-config.yaml — workers, adapters, queue configs, ports, and environment variables. Use when deploying, tuning, or customizing the engine.
iii-hq
fullstack-dev
全栈后端架构与前后端集成指南。 触发场景：构建全栈应用、配合前端开发 REST API、脚手架搭建后端服务、开发 Todo 应用、开发 CRUD 增删改查应用、开发实时应用、开发聊天应用、Express + React、Next.js API、Node.js 后端、Python 后端、Go 后端、设计服务层、实现错误处理、管理配置/鉴权、配置 API 客户端、实现身份验证流程、处理文件上传、添加实时功能（SSE/WebSocket）、生产环境加固。 不触发场景：纯前端 UI 工作、纯 CSS/样式调节、仅数据库 Schema 设计。
minimax-ai
fullstack-guardian
构建注重安全的全栈 Web 应用，通过实现集成的前端和后端组件，在每一层都提供分层安全保护。涵盖从数据库到 UI 的完整技术栈，在所有层强制实施身份验证、输入验证、输出编码和参数化查询。适用于跨前端和后端实现功能、构建带有对应 UI 的 REST API、将前端组件连接到后端端点、创建从数据库到 UI 的端到端数据流，或使用 UI 表单实现 CRUD 操作。与仅前端、仅后端或仅 API 的技能不同，它在单个实现工作流中同时处理前端、后端和安全这三个视角。在需要全栈功能工作、Web 应用开发、带有视图的认证 API 路由、微服务、实时功能、单体仓库架构或技术选型决策时调用。
jeffallannestjs-expert
用于构建和配置企业级 TypeScript 后端应用中的 NestJS 模块、控制器、服务、DTO、守卫及拦截器。适用于开发 NestJS REST API 或 GraphQL 服务、实现依赖注入、搭建模块化架构、集成 JWT/Passport 身份认证、对接 TypeORM 或 Prisma，以及处理 .module.ts、.controller.ts 和 .service.ts 文件。在 NestJS 项目中需要用到守卫、拦截器、管道、数据校验、Swagger 文档或单元/E2E 测试时调用。
jeffallan
ctf-web
提供CTF挑战中的Web利用技术。当目标主要是HTTP应用程序、API、浏览器客户端、模板引擎、身份流程或智能合约前端/后端攻击面时使用，包括XSS、SQLi、SSTI、SSRF、XXE、JWT、认证绕过、文件上传、请求走私、OAuth/OIDC、SAML、原型污染及类似的Web漏洞。不要用于原生二进制内存破坏、独立可执行文件逆向工程、磁盘或内存取证，或纯密码分析，除非Web漏洞仍然是获取flag的主要路径。
ljagiello
aws-auth
Adds user authentication to web and mobile apps with Amazon Cognito (user pools and identity pools) and the AWS Amplify client auth libraries. Covers sign-up/sign-in flows and the login page (Cognito-hosted UI / managed login), MFA, password policies, OAuth 2.0 / OIDC flows (auth-code + PKCE, client credentials), social/SAML federation, tokens (ID/access/refresh, rotation, revocation, storage), Cognito Lambda triggers, identity pools (temp AWS creds), and gating API Gateway (or ALB) routes to signed-in users via Cognito/JWT authorizers. Applies when adding a login or sign-up page, configuring a user pool or app client, choosing user pool vs identity pool, wiring social/SAML, refreshing tokens, requiring sign-in on an API Gateway or ALB, or debugging redirect_uri/token/MFA/CORS/federation errors. Does NOT cover Amplify Gen2 backend definitions (defineAuth, npx ampx → aws-amplify), IAM/STS/Identity Center (→ aws-iam), or API Gateway/Lambda resource config beyond the authorizer (→ aws-serverless).
aws
backend-development
Build robust backend systems with modern technologies (Node.js, Python, Go, Rust), frameworks (NestJS, FastAPI, Django), databases (PostgreSQL, MongoDB, Redis), APIs (REST, GraphQL, gRPC), authentication (OAuth 2.1, JWT), testing strategies, security best practices (OWASP Top 10), performance optimization, scalability patterns (microservices, caching, sharding), DevOps practices (Docker, Kubernetes, CI/CD), and monitoring. Use when designing APIs, implementing authentication, optimizing database queries, setting up CI/CD pipelines, handling security vulnerabilities, building microservices, or developing production-ready backend systems.
mrgoonie