Backend

Expert knowledge of web application security including OWASP Top 10 vulnerabilities, input validation, authentication, authorization, API security, secrets management, security headers, and secure coding practices. Use when implementing security features, reviewing code for vulnerabilities, adding authentication, validating user input, or addressing security concerns.

Implement Lexical Editor with automatic image management using Laravel Observers. Converts base64 images to file storage, deletes unused images, and handles cleanup. Use when building WYSIWYG editors with rich content, managing media uploads in editors, implementing automatic image optimization, or setting up Observer-based storage management for rich text editors.

Workflows for the Loopwish Go backend (Gin): run locally, add/modify REST endpoints, and validate with go test/build and golangci-lint.

Docker containerization patterns for Node.js applications. Use when containerizing backend services.

Define and structure database models with proper data types, relationships, constraints, and validation following ORM best practices. Use this skill when creating or modifying database model classes, ORM entities, schema definitions, or data model files. Use this skill when working with SQLAlchemy models, Django models, ActiveRecord models, Prisma schemas, TypeORM entities, or Sequelize models. Use this skill when defining table schemas, establishing relationships (one-to-many, many-to-many), implementing model validation, adding timestamps and soft deletes, or configuring cascade behaviors. Use this skill when working with files in models/, entities/, schemas/, or orm/ directories that define database table structures and business logic.

Auditar labels Traefik v3.5.x, networks e secrets em stacks Docker Swarm para garantir roteamento seguro do backend de resultados.

WHEN: Pandas/NumPy code review, data processing, vectorization, memory optimizationWHAT: Vectorization patterns + Memory efficiency + Data validation + Performance optimization + Best practicesWHEN NOT: Web framework → fastapi/django/flask-reviewer, General Python → python-reviewer

Validate MSA development environment and tool availability. Use when (1) new MSA developer onboarding, (2) checking required tools (gh CLI, Git, Node, pnpm, Prisma, gRPC), (3) verifying GitHub auth and repo access, (4) orchestrator auto-runs at work start.

Generate comprehensive Pest test suites for Laravel projects including tests for controllers, services, Livewire components, commands, jobs, and models with proper describe blocks for organization, mocking setup, happy path and failure scenarios, RefreshDatabase trait, and coverage for all public methods. Use this skill when creating test files for new features, adding test coverage for controllers or services, writing tests for API endpoints, testing Livewire components, ensuring proper test structure with beforeEach and describe blocks, implementing mocking strategies, or writing dataset-driven tests. This skill applies when working on files in tests/Feature/ or tests/Unit/ directories, creating Pest test files, or ensuring comprehensive test coverage.

Spring Boot/MyBatisによるバックエンド実装スキル - RESTful API設計、データベース設計（Flywayマイグレーション）、Controller/Service/Mapper層の実装、単体テスト作成を行います。DRY原則を徹底し、product.utilパッケージの既存実装やAOPによる自動ログ出力を活用します。未使用コード削除をIDE警告で確認し、./gradlew checkでLint/テスト/カバレッジ80%以上を保証します。サーバー起動による動作確認も必須です。

Send messages and notifications to Poke (poke.com) via webhook API. Use when alerting the user, sending task completion notifications, status updates, reminders, or any message to their Poke assistant.

Modern Rust backend with Axum, SQLx, tokio + CI/CD automation.Use when: building Rust APIs, high-performance services, or needing build/test/lint/audit automation.Triggers: "axum", "rust backend", "rust api", "sqlx", "tokio", "cargo build","cargo test", "clippy", "rustfmt", "cargo-audit", "cross-compile", "rust ci","release build", "rust security", "shuttle", "actix".

Brave Search API via curl. Use this skill for privacy-focused web, image, video, and news search with no tracking.

Curated daily news briefing across global, local, tech, science, business, and culture. Prioritizes today's news, adapts to user location and interests. Use when user asks for news, daily briefing, what's happening, or current events.

Generate and edit images using the Gemini API (Nano Banana). Use this skill when creating images from text prompts, editing existing images, applying style transfers, generating logos with text, creating stickers, product mockups, or any image generation/manipulation task. Supports text-to-image, image editing, multi-turn refinement, and composition from multiple reference images.

Creating and managing Supabase PostgreSQL databases for StickerNest. Use when the user asks to create tables, add columns, write migrations, design schemas, implement RLS policies, optimize indexes, partition tables, or scale the database. Covers enterprise-grade security, performance optimization, and social features.

Generates concise Chinese documentation for code interfaces (functions, classes, APIs) with Chinese comment extraction, optimized for Chinese development teams

Generate production-ready Workscript workflow JSON files for the Workscript Agentic Workflow Engine with built-in defensive guards and complexity detection. Use when asked to create workflows, automations, data pipelines, or generate workflow JSON. IMPORTANT - For complex requests that would result in deeply nested or overly complex workflows, this skill will STOP and suggest developing new custom nodes first using /new-node, then return to create a simpler, more linear workflow. All generated workflows include data validation (validateData node) for structured JSON outputs, input guards, array length checks, and error handling edges. Fetches up-to-date node documentation from the Reflection API when available. Outputs validated .json files to the sandbox prompts folder. Also suitable for Claude Code subagents needing to compose workflows programmatically.

Implement type-safe IPC communication in Electron using Hono RPC. Use when creating API routes between main and renderer processes, setting up typed clients, or implementing request/response IPC patterns. Provides HTTP-like semantics over Electron IPC.

Distributed task queue system for Python enabling asynchronous execution of background jobs, scheduled tasks, and workflows across multiple workers with Django, Flask, and FastAPI integration.