Comprehensive backend development skill for building scalable backend systems using Node.js, Express, Go, Python, PostgreSQL, GraphQL, REST APIs. Includes API scaffolding, database optimization, security implementation, and performance tuning. Use when designing APIs, optimizing database queries, implementing business logic, handling authentication/authorization, or reviewing backend code.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
Comprehensive backend development skill for building scalable backend systems using Node.js, Express, Go, Python, PostgreSQL, GraphQL, REST APIs. Includes API scaffolding, database optimization, security implementation, and performance tuning. Use when designing APIs, optimizing database queries, implementing business logic, handling authentication/authorization, or reviewing backend code.
domain
engineering
subdomain
backend-development
difficulty
advanced
time-saved
TODO: Quantify time savings
frequency
TODO: Estimate usage frequency
use-cases
["Building robust API services with proper authentication and authorization","Designing database schemas and optimizing query performance","Implementing microservices patterns and service communication","Setting up CI/CD pipelines for backend applications"]
Expert backend development skill with comprehensive tools for building scalable, secure, and performant backend systems using modern tech stacks and architectural patterns.
Overview
This skill provides production-ready backend development capabilities through three Python automation tools and extensive reference documentation. Whether building REST APIs, implementing GraphQL servers, designing database schemas, or optimizing performance, this skill ensures best practices and scalable architecture.
# Create REST API with Express + TypeScript + PostgreSQL
python scripts/api_scaffolder.py my-api --type rest --stack express-typescript
# Create GraphQL API with Apollo Server
python scripts/api_scaffolder.py graphql-api -- graphql --stack apollo-typescript
my-api
npm install
docker-compose up -d
npm run migrate
npm run dev
type
# Start development
cd
Database Migrations
# Create new migration
python scripts/database_migration_tool.py create "add_user_table"# Run pending migrations
python scripts/database_migration_tool.py migrate
# Rollback last migration
python scripts/database_migration_tool.py rollback
# Check migration status
python scripts/database_migration_tool.py status
Load Testing
# Test API endpoint
python scripts/api_load_tester.py http://localhost:3000/api/users --users 50 --requests 1000
# Generate HTML report
python scripts/api_load_tester.py http://localhost:3000/api/users --users 100 --requests 1000 --output html --save report.html
Core Workflows
1. New Backend Project Setup
Steps:
Scaffold project structure with api_scaffolder.py
Choose REST or GraphQL
Select tech stack (Express, Fastify, NestJS)
Enable authentication, Docker, CI/CD
Configure environment variables (.env)
Start services with Docker Compose
Run database migrations
Implement business logic in service layer
Add tests (unit and integration)
See:templates.md for complete project templates and configuration examples.
2. API Design and Implementation
REST API Design:
Resource-based URL structure
Proper HTTP methods and status codes
Request/response validation with Zod
Error handling with custom error classes
Rate limiting and authentication middleware
GraphQL API Design:
Type-safe schema definitions
Efficient resolver implementation
DataLoader for N+1 query prevention
Error handling and validation
Field-level authorization
See:frameworks.md for complete API design patterns, GraphQL schemas, and resolver examples.
api_scaffolder.py: All options, supported stacks, generated structure, workflow examples
database_migration_tool.py: Migration commands, file format, version tracking, rollback procedures
api_load_tester.py: Testing scenarios, performance metrics, output formats, best practices
Tech Stack
Languages: TypeScript, JavaScript, Python, Go
Runtime: Node.js 18+
Frameworks: Express, Fastify, NestJS, Apollo Server
Database: PostgreSQL, MySQL, MongoDB
ORM: Prisma, TypeORM, Sequelize
Caching: Redis
Authentication: JWT, bcrypt
Testing: Jest, Supertest
Validation: Zod
API Docs: Swagger/OpenAPI
DevOps: Docker, docker-compose, GitHub Actions
Monitoring: Winston (logging), Prometheus, Grafana
Best Practices Summary
Code Organization
Use layered architecture (controllers → services → repositories)
Implement dependency injection for testability
Separate business logic from HTTP layer
Use DTOs for request/response validation
Security
Hash passwords with bcrypt (10+ rounds)
Implement JWT with proper expiration
Validate all inputs with Zod schemas
Use parameterized queries (Prisma prevents SQL injection)
Rate limit authentication endpoints
Use Helmet.js for security headers
Never expose sensitive data in error messages
Performance
Cache frequently accessed data with Redis
Optimize database queries (avoid N+1 problems)
Use connection pooling
Implement pagination (cursor-based for large datasets)
Add database indexes on frequently queried fields
Use compression middleware
Testing
Write unit tests for business logic
Write integration tests for API endpoints
Aim for 80%+ code coverage
Mock external dependencies
Test error scenarios
Use factories for test data
Database
Use migrations for all schema changes
Never modify migrations after deployment
Always write DOWN migrations for rollback
Use transactions for multi-step operations
Add indexes on foreign keys
Use appropriate data types (UUID vs integer IDs)
Common Commands
# Development
npm run dev # Start development server
npm run build # Build for production
npm run start # Start production server# Database
npm run migrate # Run migrations
npm run migrate:rollback # Rollback last migration
npm run db:seed # Seed database# Testing
npm test# Run all tests
npm run test:watch # Run tests in watch mode
npm run test:coverage # Generate coverage report# Quality
npm run lint # Run ESLint
npm run format # Format code with Prettier
npm run type-check # TypeScript type checking# Docker
docker-compose up -d # Start services
docker-compose down # Stop services
docker-compose logs -f # View logs
