[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6DS2MH3M1RGDNMRZJ3C50G5":3,"skill-same:01M6DS2MH3M1RGDNMRZJ3C50G5":109},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":34,"publishedAt":55,"linkOnly":56,"markdownContent":57,"markdownBody":58,"frontMatter":59,"refName":60,"commitSha":61,"skillDirectory":62,"forksCount":63,"repositoryHtmlUrl":64,"repositoryHomepageUrl":6,"ownerHtmlUrl":65,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":66,"install":67,"resources":80},"01M6DS2MH3M1RGDNMRZJ3C50G5","senior-backend",null,"Designs and implements backend systems including REST APIs, microservices, database architectures, authentication flows, and security hardening. Use when the user asks to \"design REST APIs\", \"optimize database queries\", \"implement authentication\", \"build microservices\", \"review backend code\", \"set up GraphQL\", \"handle database migrations\", or \"load test APIs\". Covers Node.js\u002FExpress\u002FFastify development, PostgreSQL optimization, API security, and backend architecture patterns.","zhangzhang-111-i\u002Fclaude-skills111","zhangzhang-111-i","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F251344927?v=4","01M6DRBP4NCM1ZCHTT0FW0SQHD","lixiying","01M6DRBPAMFDJSGQ69XPK9KM9J",4,"MIT","https:\u002F\u002Fgithub.com\u002Fzhangzhang-111-i\u002Fclaude-skills111\u002Fblob\u002Fmain\u002Fengineering-team\u002Fsenior-backend\u002FSKILL.md",[18,23,26,31],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000010","后端与接口","SCENARIO","使用场景",{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000015","视觉设计",{"categoryNo":27,"categoryName":28,"taxonomyType":29,"taxonomyTypeDesc":30},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",{"categoryNo":32,"categoryName":33,"taxonomyType":29,"taxonomyTypeDesc":30},"01JBSEEDCAT000000000000032","设计师",[35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54],"backend","senior backend","database queries","design","express","optimize","patterns","database migrations","up","node","api","SET","postgresql optimization","postgresql","database","authentication","code","architecture","security","review","2026-11-10 10:12:30",false,"---\nname: \"senior-backend\"\ndescription: Designs and implements backend systems including REST APIs, microservices, database architectures, authentication flows, and security hardening. Use when the user asks to \"design REST APIs\", \"optimize database queries\", \"implement authentication\", \"build microservices\", \"review backend code\", \"set up GraphQL\", \"handle database migrations\", or \"load test APIs\". Covers Node.js\u002FExpress\u002FFastify development, PostgreSQL optimization, API security, and backend architecture patterns.\n---\n\n# Senior Backend Engineer\n\nBackend development patterns, API design, database optimization, and security practices.\n\n---\n\n## Quick Start\n\n```bash\n# Generate API routes from OpenAPI spec\npython scripts\u002Fapi_scaffolder.py openapi.yaml --framework express --output src\u002Froutes\u002F\n\n# Analyze database schema and generate migrations\npython scripts\u002Fdatabase_migration_tool.py --connection postgres:\u002F\u002Flocalhost\u002Fmydb --analyze\n\n# Load test an API endpoint\npython scripts\u002Fapi_load_tester.py https:\u002F\u002Fapi.example.com\u002Fusers --concurrency 50 --duration 30\n```\n\n---\n\n## Tools Overview\n\n### 1. API Scaffolder\n\nGenerates API route handlers, middleware, and OpenAPI specifications from schema definitions.\n\n**Input:** OpenAPI spec (YAML\u002FJSON) or database schema\n**Output:** Route handlers, validation middleware, TypeScript types\n\n**Usage:**\n```bash\n# Generate Express routes from OpenAPI spec\npython scripts\u002Fapi_scaffolder.py openapi.yaml --framework express --output src\u002Froutes\u002F\n# Output: Generated 12 route handlers, validation middleware, and TypeScript types\n\n# Generate from database schema\npython scripts\u002Fapi_scaffolder.py --from-db postgres:\u002F\u002Flocalhost\u002Fmydb --output src\u002Froutes\u002F\n\n# Generate OpenAPI spec from existing routes\npython scripts\u002Fapi_scaffolder.py src\u002Froutes\u002F --generate-spec --output openapi.yaml\n```\n\n**Supported Frameworks:**\n- Express.js (`--framework express`)\n- Fastify (`--framework fastify`)\n- Koa (`--framework koa`)\n\n---\n\n### 2. Database Migration Tool\n\nAnalyzes database schemas, detects changes, and generates migration files with rollback support.\n\n**Input:** Database connection string or schema files\n**Output:** Migration files, schema diff report, optimization suggestions\n\n**Usage:**\n```bash\n# Analyze current schema and suggest optimizations\npython scripts\u002Fdatabase_migration_tool.py --connection postgres:\u002F\u002Flocalhost\u002Fmydb --analyze\n# Output: Missing indexes, N+1 query risks, and suggested migration files\n\n# Generate migration from schema diff\npython scripts\u002Fdatabase_migration_tool.py --connection postgres:\u002F\u002Flocalhost\u002Fmydb \\\n  --compare schema\u002Fv2.sql --output migrations\u002F\n\n# Dry-run a migration\npython scripts\u002Fdatabase_migration_tool.py --connection postgres:\u002F\u002Flocalhost\u002Fmydb \\\n  --migrate migrations\u002F20240115_add_user_indexes.sql --dry-run\n```\n\n---\n\n### 3. API Load Tester\n\nPerforms HTTP load testing with configurable concurrency, measuring latency percentiles and throughput.\n\n**Input:** API endpoint URL and test configuration\n**Output:** Performance report with latency distribution, error rates, throughput metrics\n\n**Usage:**\n```bash\n# Basic load test\npython scripts\u002Fapi_load_tester.py https:\u002F\u002Fapi.example.com\u002Fusers --concurrency 50 --duration 30\n# Output: Throughput (req\u002Fsec), latency percentiles (P50\u002FP95\u002FP99), error counts, and scaling recommendations\n\n# Test with custom headers and body\npython scripts\u002Fapi_load_tester.py https:\u002F\u002Fapi.example.com\u002Forders \\\n  --method POST \\\n  --header \"Authorization: Bearer token123\" \\\n  --body '{\"product_id\": 1, \"quantity\": 2}' \\\n  --concurrency 100 \\\n  --duration 60\n\n# Compare two endpoints\npython scripts\u002Fapi_load_tester.py https:\u002F\u002Fapi.example.com\u002Fv1\u002Fusers https:\u002F\u002Fapi.example.com\u002Fv2\u002Fusers \\\n  --compare --concurrency 50 --duration 30\n```\n\n---\n\n## Backend Development Workflows\n\n### API Design Workflow\n\nUse when designing a new API or refactoring existing endpoints.\n\n**Step 1: Define resources and operations**\n```yaml\n# openapi.yaml\nopenapi: 3.0.3\ninfo:\n  title: User Service API\n  version: 1.0.0\npaths:\n  \u002Fusers:\n    get:\n      summary: List users\n      parameters:\n        - name: \"limit\"\n          in: query\n          schema:\n            type: integer\n            default: 20\n    post:\n      summary: Create user\n      requestBody:\n        required: true\n        content:\n          application\u002Fjson:\n            schema:\n              $ref: '#\u002Fcomponents\u002Fschemas\u002FCreateUser'\n```\n\n**Step 2: Generate route scaffolding**\n```bash\npython scripts\u002Fapi_scaffolder.py openapi.yaml --framework express --output src\u002Froutes\u002F\n```\n\n**Step 3: Implement business logic**\n```typescript\n\u002F\u002F src\u002Froutes\u002Fusers.ts (generated, then customized)\nexport const createUser = async (req: Request, res: Response) => {\n  const { email, name } = req.body;\n\n  \u002F\u002F Add business logic\n  const user = await userService.create({ email, name });\n\n  res.status(201).json(user);\n};\n```\n\n**Step 4: Add validation middleware**\n```bash\n# Validation is auto-generated from OpenAPI schema\n# src\u002Fmiddleware\u002Fvalidators.ts includes:\n# - Request body validation\n# - Query parameter validation\n# - Path parameter validation\n```\n\n**Step 5: Generate updated OpenAPI spec**\n```bash\npython scripts\u002Fapi_scaffolder.py src\u002Froutes\u002F --generate-spec --output openapi.yaml\n```\n\n---\n\n### Database Optimization Workflow\n\nUse when queries are slow or database performance needs improvement.\n\n**Step 1: Analyze current performance**\n```bash\npython scripts\u002Fdatabase_migration_tool.py --connection $DATABASE_URL --analyze\n```\n\n**Step 2: Identify slow queries**\n```sql\n-- Check query execution plans\nEXPLAIN ANALYZE SELECT * FROM orders\nWHERE user_id = 123\nORDER BY created_at DESC\nLIMIT 10;\n\n-- Look for: Seq Scan (bad), Index Scan (good)\n```\n\n**Step 3: Generate index migrations**\n```bash\npython scripts\u002Fdatabase_migration_tool.py --connection $DATABASE_URL \\\n  --suggest-indexes --output migrations\u002F\n```\n\n**Step 4: Test migration (dry-run)**\n```bash\npython scripts\u002Fdatabase_migration_tool.py --connection $DATABASE_URL \\\n  --migrate migrations\u002Fadd_indexes.sql --dry-run\n```\n\n**Step 5: Apply and verify**\n```bash\n# Apply migration\npython scripts\u002Fdatabase_migration_tool.py --connection $DATABASE_URL \\\n  --migrate migrations\u002Fadd_indexes.sql\n\n# Verify improvement\npython scripts\u002Fdatabase_migration_tool.py --connection $DATABASE_URL --analyze\n```\n\n---\n\n### Security Hardening Workflow\n\nUse when preparing an API for production or after a security review.\n\n**Step 1: Review authentication setup**\n```typescript\n\u002F\u002F Verify JWT configuration\nconst jwtConfig = {\n  secret: process.env.JWT_SECRET,  \u002F\u002F Must be from env, never hardcoded\n  expiresIn: '1h',                 \u002F\u002F Short-lived tokens\n  algorithm: 'RS256'               \u002F\u002F Prefer asymmetric\n};\n```\n\n**Step 2: Add rate limiting**\n```typescript\nimport rateLimit from 'express-rate-limit';\n\nconst apiLimiter = rateLimit({\n  windowMs: 15 * 60 * 1000,  \u002F\u002F 15 minutes\n  max: 100,                   \u002F\u002F 100 requests per window\n  standardHeaders: true,\n  legacyHeaders: false,\n});\n\napp.use('\u002Fapi\u002F', apiLimiter);\n```\n\n**Step 3: Validate all inputs**\n```typescript\nimport { z } from 'zod';\n\nconst CreateUserSchema = z.object({\n  email: z.string().email().max(255),\n  name: \"zstringmin1max100\"\n  age: z.number().int().positive().optional()\n});\n\n\u002F\u002F Use in route handler\nconst data = CreateUserSchema.parse(req.body);\n```\n\n**Step 4: Load test with attack patterns**\n```bash\n# Test rate limiting\npython scripts\u002Fapi_load_tester.py https:\u002F\u002Fapi.example.com\u002Flogin \\\n  --concurrency 200 --duration 10 --expect-rate-limit\n\n# Test input validation\npython scripts\u002Fapi_load_tester.py https:\u002F\u002Fapi.example.com\u002Fusers \\\n  --method POST \\\n  --body '{\"email\": \"not-an-email\"}' \\\n  --expect-status 400\n```\n\n**Step 5: Review security headers**\n```typescript\nimport helmet from 'helmet';\n\napp.use(helmet({\n  contentSecurityPolicy: true,\n  crossOriginEmbedderPolicy: true,\n  crossOriginOpenerPolicy: true,\n  crossOriginResourcePolicy: true,\n  hsts: { maxAge: 31536000, includeSubDomains: true },\n}));\n```\n\n---\n\n## Reference Documentation\n\n| File | Contains | Use When |\n|------|----------|----------|\n| `references\u002Fapi_design_patterns.md` | REST vs GraphQL, versioning, error handling, pagination | Designing new APIs |\n| `references\u002Fdatabase_optimization_guide.md` | Indexing strategies, query optimization, N+1 solutions | Fixing slow queries |\n| `references\u002Fbackend_security_practices.md` | OWASP Top 10, auth patterns, input validation | Security hardening |\n\n---\n\n## Common Patterns Quick Reference\n\n### REST API Response Format\n```json\n{\n  \"data\": { \"id\": 1, \"name\": \"John\" },\n  \"meta\": { \"requestId\": \"abc-123\" }\n}\n```\n\n### Error Response Format\n```json\n{\n  \"error\": {\n    \"code\": \"VALIDATION_ERROR\",\n    \"message\": \"Invalid email format\",\n    \"details\": [{ \"field\": \"email\", \"message\": \"must be valid email\" }]\n  },\n  \"meta\": { \"requestId\": \"abc-123\" }\n}\n```\n\n### HTTP Status Codes\n| Code | Use Case |\n|------|----------|\n| 200 | Success (GET, PUT, PATCH) |\n| 201 | Created (POST) |\n| 204 | No Content (DELETE) |\n| 400 | Validation error |\n| 401 | Authentication required |\n| 403 | Permission denied |\n| 404 | Resource not found |\n| 429 | Rate limit exceeded |\n| 500 | Internal server error |\n\n### Database Index Strategy\n```sql\n-- Single column (equality lookups)\nCREATE INDEX idx_users_email ON users(email);\n\n-- Composite (multi-column queries)\nCREATE INDEX idx_orders_user_status ON orders(user_id, status);\n\n-- Partial (filtered queries)\nCREATE INDEX idx_orders_active ON orders(created_at) WHERE status = 'active';\n\n-- Covering (avoid table lookup)\nCREATE INDEX idx_users_email_name ON users(email) INCLUDE (name);\n```\n\n---\n\n## Common Commands\n\n```bash\n# API Development\npython scripts\u002Fapi_scaffolder.py openapi.yaml --framework express\npython scripts\u002Fapi_scaffolder.py src\u002Froutes\u002F --generate-spec\n\n# Database Operations\npython scripts\u002Fdatabase_migration_tool.py --connection $DATABASE_URL --analyze\npython scripts\u002Fdatabase_migration_tool.py --connection $DATABASE_URL --migrate file.sql\n\n# Performance Testing\npython scripts\u002Fapi_load_tester.py https:\u002F\u002Fapi.example.com\u002Fendpoint --concurrency 50\npython scripts\u002Fapi_load_tester.py https:\u002F\u002Fapi.example.com\u002Fendpoint --compare baseline.json\n```\n","# Senior Backend Engineer\n\nBackend development patterns, API design, database optimization, and security practices.\n\n---\n\n## Quick Start\n\n```bash\n# Generate API routes from OpenAPI spec\npython scripts\u002Fapi_scaffolder.py openapi.yaml --framework express --output src\u002Froutes\u002F\n\n# Analyze database schema and generate migrations\npython scripts\u002Fdatabase_migration_tool.py --connection postgres:\u002F\u002Flocalhost\u002Fmydb --analyze\n\n# Load test an API endpoint\npython scripts\u002Fapi_load_tester.py https:\u002F\u002Fapi.example.com\u002Fusers --concurrency 50 --duration 30\n```\n\n---\n\n## Tools Overview\n\n### 1. API Scaffolder\n\nGenerates API route handlers, middleware, and OpenAPI specifications from schema definitions.\n\n**Input:** OpenAPI spec (YAML\u002FJSON) or database schema\n**Output:** Route handlers, validation middleware, TypeScript types\n\n**Usage:**\n```bash\n# Generate Express routes from OpenAPI spec\npython scripts\u002Fapi_scaffolder.py openapi.yaml --framework express --output src\u002Froutes\u002F\n# Output: Generated 12 route handlers, validation middleware, and TypeScript types\n\n# Generate from database schema\npython scripts\u002Fapi_scaffolder.py --from-db postgres:\u002F\u002Flocalhost\u002Fmydb --output src\u002Froutes\u002F\n\n# Generate OpenAPI spec from existing routes\npython scripts\u002Fapi_scaffolder.py src\u002Froutes\u002F --generate-spec --output openapi.yaml\n```\n\n**Supported Frameworks:**\n- Express.js (`--framework express`)\n- Fastify (`--framework fastify`)\n- Koa (`--framework koa`)\n\n---\n\n### 2. Database Migration Tool\n\nAnalyzes database schemas, detects changes, and generates migration files with rollback support.\n\n**Input:** Database connection string or schema files\n**Output:** Migration files, schema diff report, optimization suggestions\n\n**Usage:**\n```bash\n# Analyze current schema and suggest optimizations\npython scripts\u002Fdatabase_migration_tool.py --connection postgres:\u002F\u002Flocalhost\u002Fmydb --analyze\n# Output: Missing indexes, N+1 query risks, and suggested migration files\n\n# Generate migration from schema diff\npython scripts\u002Fdatabase_migration_tool.py --connection postgres:\u002F\u002Flocalhost\u002Fmydb \\\n  --compare schema\u002Fv2.sql --output migrations\u002F\n\n# Dry-run a migration\npython scripts\u002Fdatabase_migration_tool.py --connection postgres:\u002F\u002Flocalhost\u002Fmydb \\\n  --migrate migrations\u002F20240115_add_user_indexes.sql --dry-run\n```\n\n---\n\n### 3. API Load Tester\n\nPerforms HTTP load testing with configurable concurrency, measuring latency percentiles and throughput.\n\n**Input:** API endpoint URL and test configuration\n**Output:** Performance report with latency distribution, error rates, throughput metrics\n\n**Usage:**\n```bash\n# Basic load test\npython scripts\u002Fapi_load_tester.py https:\u002F\u002Fapi.example.com\u002Fusers --concurrency 50 --duration 30\n# Output: Throughput (req\u002Fsec), latency percentiles (P50\u002FP95\u002FP99), error counts, and scaling recommendations\n\n# Test with custom headers and body\npython scripts\u002Fapi_load_tester.py https:\u002F\u002Fapi.example.com\u002Forders \\\n  --method POST \\\n  --header \"Authorization: Bearer token123\" \\\n  --body '{\"product_id\": 1, \"quantity\": 2}' \\\n  --concurrency 100 \\\n  --duration 60\n\n# Compare two endpoints\npython scripts\u002Fapi_load_tester.py https:\u002F\u002Fapi.example.com\u002Fv1\u002Fusers https:\u002F\u002Fapi.example.com\u002Fv2\u002Fusers \\\n  --compare --concurrency 50 --duration 30\n```\n\n---\n\n## Backend Development Workflows\n\n### API Design Workflow\n\nUse when designing a new API or refactoring existing endpoints.\n\n**Step 1: Define resources and operations**\n```yaml\n# openapi.yaml\nopenapi: 3.0.3\ninfo:\n  title: User Service API\n  version: 1.0.0\npaths:\n  \u002Fusers:\n    get:\n      summary: List users\n      parameters:\n        - name: \"limit\"\n          in: query\n          schema:\n            type: integer\n            default: 20\n    post:\n      summary: Create user\n      requestBody:\n        required: true\n        content:\n          application\u002Fjson:\n            schema:\n              $ref: '#\u002Fcomponents\u002Fschemas\u002FCreateUser'\n```\n\n**Step 2: Generate route scaffolding**\n```bash\npython scripts\u002Fapi_scaffolder.py openapi.yaml --framework express --output src\u002Froutes\u002F\n```\n\n**Step 3: Implement business logic**\n```typescript\n\u002F\u002F src\u002Froutes\u002Fusers.ts (generated, then customized)\nexport const createUser = async (req: Request, res: Response) => {\n  const { email, name } = req.body;\n\n  \u002F\u002F Add business logic\n  const user = await userService.create({ email, name });\n\n  res.status(201).json(user);\n};\n```\n\n**Step 4: Add validation middleware**\n```bash\n# Validation is auto-generated from OpenAPI schema\n# src\u002Fmiddleware\u002Fvalidators.ts includes:\n# - Request body validation\n# - Query parameter validation\n# - Path parameter validation\n```\n\n**Step 5: Generate updated OpenAPI spec**\n```bash\npython scripts\u002Fapi_scaffolder.py src\u002Froutes\u002F --generate-spec --output openapi.yaml\n```\n\n---\n\n### Database Optimization Workflow\n\nUse when queries are slow or database performance needs improvement.\n\n**Step 1: Analyze current performance**\n```bash\npython scripts\u002Fdatabase_migration_tool.py --connection $DATABASE_URL --analyze\n```\n\n**Step 2: Identify slow queries**\n```sql\n-- Check query execution plans\nEXPLAIN ANALYZE SELECT * FROM orders\nWHERE user_id = 123\nORDER BY created_at DESC\nLIMIT 10;\n\n-- Look for: Seq Scan (bad), Index Scan (good)\n```\n\n**Step 3: Generate index migrations**\n```bash\npython scripts\u002Fdatabase_migration_tool.py --connection $DATABASE_URL \\\n  --suggest-indexes --output migrations\u002F\n```\n\n**Step 4: Test migration (dry-run)**\n```bash\npython scripts\u002Fdatabase_migration_tool.py --connection $DATABASE_URL \\\n  --migrate migrations\u002Fadd_indexes.sql --dry-run\n```\n\n**Step 5: Apply and verify**\n```bash\n# Apply migration\npython scripts\u002Fdatabase_migration_tool.py --connection $DATABASE_URL \\\n  --migrate migrations\u002Fadd_indexes.sql\n\n# Verify improvement\npython scripts\u002Fdatabase_migration_tool.py --connection $DATABASE_URL --analyze\n```\n\n---\n\n### Security Hardening Workflow\n\nUse when preparing an API for production or after a security review.\n\n**Step 1: Review authentication setup**\n```typescript\n\u002F\u002F Verify JWT configuration\nconst jwtConfig = {\n  secret: process.env.JWT_SECRET,  \u002F\u002F Must be from env, never hardcoded\n  expiresIn: '1h',                 \u002F\u002F Short-lived tokens\n  algorithm: 'RS256'               \u002F\u002F Prefer asymmetric\n};\n```\n\n**Step 2: Add rate limiting**\n```typescript\nimport rateLimit from 'express-rate-limit';\n\nconst apiLimiter = rateLimit({\n  windowMs: 15 * 60 * 1000,  \u002F\u002F 15 minutes\n  max: 100,                   \u002F\u002F 100 requests per window\n  standardHeaders: true,\n  legacyHeaders: false,\n});\n\napp.use('\u002Fapi\u002F', apiLimiter);\n```\n\n**Step 3: Validate all inputs**\n```typescript\nimport { z } from 'zod';\n\nconst CreateUserSchema = z.object({\n  email: z.string().email().max(255),\n  name: \"zstringmin1max100\"\n  age: z.number().int().positive().optional()\n});\n\n\u002F\u002F Use in route handler\nconst data = CreateUserSchema.parse(req.body);\n```\n\n**Step 4: Load test with attack patterns**\n```bash\n# Test rate limiting\npython scripts\u002Fapi_load_tester.py https:\u002F\u002Fapi.example.com\u002Flogin \\\n  --concurrency 200 --duration 10 --expect-rate-limit\n\n# Test input validation\npython scripts\u002Fapi_load_tester.py https:\u002F\u002Fapi.example.com\u002Fusers \\\n  --method POST \\\n  --body '{\"email\": \"not-an-email\"}' \\\n  --expect-status 400\n```\n\n**Step 5: Review security headers**\n```typescript\nimport helmet from 'helmet';\n\napp.use(helmet({\n  contentSecurityPolicy: true,\n  crossOriginEmbedderPolicy: true,\n  crossOriginOpenerPolicy: true,\n  crossOriginResourcePolicy: true,\n  hsts: { maxAge: 31536000, includeSubDomains: true },\n}));\n```\n\n---\n\n## Reference Documentation\n\n| File | Contains | Use When |\n|------|----------|----------|\n| `references\u002Fapi_design_patterns.md` | REST vs GraphQL, versioning, error handling, pagination | Designing new APIs |\n| `references\u002Fdatabase_optimization_guide.md` | Indexing strategies, query optimization, N+1 solutions | Fixing slow queries |\n| `references\u002Fbackend_security_practices.md` | OWASP Top 10, auth patterns, input validation | Security hardening |\n\n---\n\n## Common Patterns Quick Reference\n\n### REST API Response Format\n```json\n{\n  \"data\": { \"id\": 1, \"name\": \"John\" },\n  \"meta\": { \"requestId\": \"abc-123\" }\n}\n```\n\n### Error Response Format\n```json\n{\n  \"error\": {\n    \"code\": \"VALIDATION_ERROR\",\n    \"message\": \"Invalid email format\",\n    \"details\": [{ \"field\": \"email\", \"message\": \"must be valid email\" }]\n  },\n  \"meta\": { \"requestId\": \"abc-123\" }\n}\n```\n\n### HTTP Status Codes\n| Code | Use Case |\n|------|----------|\n| 200 | Success (GET, PUT, PATCH) |\n| 201 | Created (POST) |\n| 204 | No Content (DELETE) |\n| 400 | Validation error |\n| 401 | Authentication required |\n| 403 | Permission denied |\n| 404 | Resource not found |\n| 429 | Rate limit exceeded |\n| 500 | Internal server error |\n\n### Database Index Strategy\n```sql\n-- Single column (equality lookups)\nCREATE INDEX idx_users_email ON users(email);\n\n-- Composite (multi-column queries)\nCREATE INDEX idx_orders_user_status ON orders(user_id, status);\n\n-- Partial (filtered queries)\nCREATE INDEX idx_orders_active ON orders(created_at) WHERE status = 'active';\n\n-- Covering (avoid table lookup)\nCREATE INDEX idx_users_email_name ON users(email) INCLUDE (name);\n```\n\n---\n\n## Common Commands\n\n```bash\n# API Development\npython scripts\u002Fapi_scaffolder.py openapi.yaml --framework express\npython scripts\u002Fapi_scaffolder.py src\u002Froutes\u002F --generate-spec\n\n# Database Operations\npython scripts\u002Fdatabase_migration_tool.py --connection $DATABASE_URL --analyze\npython scripts\u002Fdatabase_migration_tool.py --connection $DATABASE_URL --migrate file.sql\n\n# Performance Testing\npython scripts\u002Fapi_load_tester.py https:\u002F\u002Fapi.example.com\u002Fendpoint --concurrency 50\npython scripts\u002Fapi_load_tester.py https:\u002F\u002Fapi.example.com\u002Fendpoint --compare baseline.json\n```\n",{"name":5,"description":7},"main","c0a12fc98d85642fa8893e31fc5cf5dfad879de6","engineering-team\u002Fsenior-backend",0,"https:\u002F\u002Fgithub.com\u002Fzhangzhang-111-i\u002Fclaude-skills111","https:\u002F\u002Fgithub.com\u002Fzhangzhang-111-i","2026-03-13 21:49:18",{"source":8,"skillName":5,"commands":68,"prompt":78,"zipAvailable":79},[69,72,75],{"tool":70,"command":71},"npx","npx skills add zhangzhang-111-i\u002Fclaude-skills111 --skill senior-backend",{"tool":73,"command":74},"bunx","bunx skills add zhangzhang-111-i\u002Fclaude-skills111 --skill senior-backend",{"tool":76,"command":77},"pnpm","pnpm dlx skills add zhangzhang-111-i\u002Fclaude-skills111 --skill senior-backend","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fzhangzhang-111-i\u002Fclaude-skills111\u002Fblob\u002Fmain\u002Fengineering-team\u002Fsenior-backend\u002FSKILL.md",true,[81,87,91,95,101,105],{"path":82,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":85,"sourceHtmlUrl":86},"references\u002Fapi_design_patterns.md","REFERENCE","参考文档",13639,"https:\u002F\u002Fgithub.com\u002Fzhangzhang-111-i\u002Fclaude-skills111\u002Fblob\u002Fmain\u002Fengineering-team\u002Fsenior-backend\u002Freferences\u002Fapi_design_patterns.md",{"path":88,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":89,"sourceHtmlUrl":90},"references\u002Fbackend_security_practices.md",25480,"https:\u002F\u002Fgithub.com\u002Fzhangzhang-111-i\u002Fclaude-skills111\u002Fblob\u002Fmain\u002Fengineering-team\u002Fsenior-backend\u002Freferences\u002Fbackend_security_practices.md",{"path":92,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":93,"sourceHtmlUrl":94},"references\u002Fdatabase_optimization_guide.md",13949,"https:\u002F\u002Fgithub.com\u002Fzhangzhang-111-i\u002Fclaude-skills111\u002Fblob\u002Fmain\u002Fengineering-team\u002Fsenior-backend\u002Freferences\u002Fdatabase_optimization_guide.md",{"path":96,"resourceType":97,"resourceTypeDesc":98,"sizeBytes":99,"sourceHtmlUrl":100},"scripts\u002Fapi_load_tester.py","SCRIPT","脚本",19800,"https:\u002F\u002Fgithub.com\u002Fzhangzhang-111-i\u002Fclaude-skills111\u002Fblob\u002Fmain\u002Fengineering-team\u002Fsenior-backend\u002Fscripts\u002Fapi_load_tester.py",{"path":102,"resourceType":97,"resourceTypeDesc":98,"sizeBytes":103,"sourceHtmlUrl":104},"scripts\u002Fapi_scaffolder.py",21442,"https:\u002F\u002Fgithub.com\u002Fzhangzhang-111-i\u002Fclaude-skills111\u002Fblob\u002Fmain\u002Fengineering-team\u002Fsenior-backend\u002Fscripts\u002Fapi_scaffolder.py",{"path":106,"resourceType":97,"resourceTypeDesc":98,"sizeBytes":107,"sourceHtmlUrl":108},"scripts\u002Fdatabase_migration_tool.py",32200,"https:\u002F\u002Fgithub.com\u002Fzhangzhang-111-i\u002Fclaude-skills111\u002Fblob\u002Fmain\u002Fengineering-team\u002Fsenior-backend\u002Fscripts\u002Fdatabase_migration_tool.py",[110,137,163,183,203,226],{"skillNo":111,"name":112,"nameZh":6,"description":113,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":114,"categories":115,"keywords":116,"publishedAt":55},"01M6DSNYM8PZKEXGYMRX53PVPH","risk-management-specialist","Medical device risk management specialist implementing ISO 14971 throughout product lifecycle. Provides risk analysis, risk evaluation, risk control, and post-production information analysis. Use when user mentions risk management, ISO 14971, risk analysis, FMEA, fault tree analysis, hazard identification, risk control, risk matrix, benefit-risk analysis, residual risk, risk acceptability, or post-market risk.","https:\u002F\u002Fgithub.com\u002Fzhangzhang-111-i\u002Fclaude-skills111\u002Fblob\u002Fmain\u002Fra-qm-team\u002Frisk-management-specialist\u002FSKILL.md",[],[117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136],"risk","risk management specialist","management","risk management","risk analysis","risk evaluation","product","Evaluation","Production","lifecycle","analysis","user","use","risk matrix","Market","device","control","iso","medical","iso 14971",{"skillNo":138,"name":139,"nameZh":6,"description":140,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":141,"categories":142,"keywords":143,"publishedAt":55},"01M6DSNSRBGVZWS23TK0ZQ52QC","regulatory-affairs-head","Senior Regulatory Affairs Manager for HealthTech and MedTech companies. Prepares FDA 510(k), De Novo, and PMA submission packages; analyzes regulatory pathways for new medical devices; drafts responses to FDA deficiency letters and Notified Body queries; develops CE marking technical documentation under EU MDR 2017\u002F745; coordinates multi-market approval strategies across FDA, EU, Health Canada, PMDA, and NMPA; and maintains regulatory intelligence on evolving standards. Use when users need to plan or execute FDA submissions, navigate 510(k) or PMA approval processes, achieve CE marking, prepare pre-submission meeting materials, write regulatory strategy documents, respond to agency queries, or manage compliance documentation for medical device market access.","https:\u002F\u002Fgithub.com\u002Fzhangzhang-111-i\u002Fclaude-skills111\u002Fblob\u002Fmain\u002Fra-qm-team\u002Fregulatory-affairs-head\u002FSKILL.md",[],[144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,135,162],"regulatory affairs head","regulatory","head","documentation","documents","packages","planning","devices","plan","access","write","strategy","evidence","standards","manage","intelligence","across","strategies","clinical",{"skillNo":164,"name":165,"nameZh":6,"description":166,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":167,"categories":168,"keywords":171,"publishedAt":55},"01M6DSNN7GNR2HZE66S4D31EP8","quality-manager-qms-iso13485","ISO 13485 Quality Management System implementation and maintenance for medical device organizations. Provides QMS design, documentation control, internal auditing, CAPA management, and certification support. Use when working with medical device quality systems, preparing for ISO 13485 audits, managing regulatory compliance documentation, setting up corrective actions, or building audit preparation programs. Useful for quality management, audit preparation, regulatory compliance, medical device documentation, and corrective action workflows.","https:\u002F\u002Fgithub.com\u002Fzhangzhang-111-i\u002Fclaude-skills111\u002Fblob\u002Fmain\u002Fra-qm-team\u002Fquality-manager-qms-iso13485\u002FSKILL.md",[169,170],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":32,"categoryName":33,"taxonomyType":29,"taxonomyTypeDesc":30},[172,173,38,54,174,175,147,176,177,178,179,180,129,145,43,181,182,133,134,135],"quality manager qms iso13485","quality","support","workflows","audit","actions","compliance","system","process","maintenance","document",{"skillNo":184,"name":185,"nameZh":6,"description":186,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":187,"categories":188,"keywords":192,"publishedAt":55},"01M6DSNE5PQM106PM4EDGPBWGZ","quality-manager-qmr","Senior Quality Manager Responsible Person (QMR) for HealthTech and MedTech companies. Provides quality system governance, management review leadership, regulatory compliance oversight, and quality performance monitoring per ISO 13485 Clause 5.5.2.","https:\u002F\u002Fgithub.com\u002Fzhangzhang-111-i\u002Fclaude-skills111\u002Fblob\u002Fmain\u002Fra-qm-team\u002Fquality-manager-qmr\u002FSKILL.md",[189],{"categoryNo":190,"categoryName":191,"taxonomyType":29,"taxonomyTypeDesc":30},"01JBSEEDCAT000000000000037","律师与法务",[193,173,54,194,195,196,197,178,198,179,119,199,145,200,201,202,134],"quality manager qmr","policy","performance","governance","monitoring","regulatory compliance","oversight","cost","culture","leadership",{"skillNo":204,"name":205,"nameZh":6,"description":206,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":207,"categories":208,"keywords":213,"publishedAt":55},"01M6DSN7MYXB6X42TB1GH2TNSB","quality-documentation-manager","Document control system management for medical device QMS. Covers document numbering, version control, change management, and 21 CFR Part 11 compliance. Use for document control procedures, change control workflow, document numbering, version management, electronic signature compliance, or regulatory documentation review.","https:\u002F\u002Fgithub.com\u002Fzhangzhang-111-i\u002Fclaude-skills111\u002Fblob\u002Fmain\u002Fra-qm-team\u002Fquality-documentation-manager\u002FSKILL.md",[209,212],{"categoryNo":210,"categoryName":211,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000002","文档处理",{"categoryNo":190,"categoryName":191,"taxonomyType":29,"taxonomyTypeDesc":30},[147,214,173,54,215,216,176,126,217,179,218,219,129,220,221,222,135,223,224,225],"quality documentation manager","workflow","change","document lifecycle","change management","list","master","system management","documentation review","cfr","21 cfr part 11","change control",{"skillNo":227,"name":228,"nameZh":6,"description":229,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":230,"categories":231,"keywords":232,"publishedAt":55},"01M6DSN3R749H3R20K15QE8X8W","qms-audit-expert","ISO 13485 internal audit expertise for medical device QMS. Covers audit planning, execution, nonconformity classification, and CAPA verification. Use for internal audit planning, audit execution, finding classification, external audit preparation, or audit program management.","https:\u002F\u002Fgithub.com\u002Fzhangzhang-111-i\u002Fclaude-skills111\u002Fblob\u002Fmain\u002Fra-qm-team\u002Fqms-audit-expert\u002FSKILL.md",[],[176,233,234,150,235,236,237,238,119,129,239,132,134,135],"qms audit expert","expert","verification","execution","classification","schedule","checklist"]