Backend

AI content generation with OpenAI and Claude, callAIWithPrompt usage, prompt storage in app_settings, structured outputs, response format validation, multi-criteria scoring, rate limiting, JSON schema, and AI API best practices. Use when generating content, creating prompts, scoring articles, or working with OpenAI/Claude APIs.

Core Python development skill for scripts, utilities, and general Python code. Covers uv package management, script dependencies, project setup, and coding standards. Use for Python file creation, running scripts, dependency management, or general Python tasks. For web APIs and servers, see python-backend skill. For testing, see python-testing skill.

Generate and maintain the FastAPI backend structure for the RAG chatbot with proper project organization.

System architecture design for Rust/WebAssembly projects. Creates ADRs,designs APIs, plans module structures, and documents architectural decisions.Never writes implementation code - focuses purely on design and documentation.

Modern TypeScript patterns and migration guidance for Deno: resource management with 'using', async generators, error handling, and Web Standard APIs. Use when migrating from Node.js, implementing cleanup logic, or learning modern JS/TS patterns.

REST and GraphQL API design best practices including HTTP methods, status codes, and documentation.

Create and manage database migrations with reversible changes, proper naming conventions, and zero-downtime deployment considerations. Use this skill when creating new database migrations, modifying schema changes, adding or removing tables/columns, creating indexes, or managing data migrations. When working on files in migrations/, db/migrate/, alembic/, or prisma/migrations/ directories. When writing up/down migration methods, planning schema changes for production deployments, or reviewing migration files for safety and rollback capability.

Comprehensive JWT authentication expert for senior developers (10+ years experience). Intelligently detects project language/framework and implements production-ready JWT auth systems with refresh tokens, secure HTTP-only cookies, token rotation, blacklisting, RBAC, MFA, and complete security. Covers Express, FastAPI, Next.js, React, Django, Flask, NestJS, and more. Automatically audits JWT implementations, generates complete auth systems (registration, login, logout, refresh, password reset), implements middleware, prevents XSS/CSRF attacks, uses bcrypt/argon2 hashing, and follows OWASP best practices. Use for implementing JWT authentication, token refresh flows, secure cookie storage, protected routes, role-based access control, security audits, and complete auth system generation.

Codex CLI（read-only）を用いて、レビュー→Claude Code修正→再レビュー（ok: true まで）を反復し収束させるレビューゲート。仕様書/SPEC/PRD/要件定義/設計、実装計画（PLANS.md等）の作成・更新直後、major step（>=5 files / 新規モジュール / 公開API / infra・config変更）完了後、および git commit / PR / merge / release 前に使用する。キーワード: Codexレビュー, codex review, レビューゲート.

Git worktree-based workflow for parallel development with shared context. Incremental commits after logical units, feature branches with nested issue branches, squash-merge to main. Use when creating/managing worktrees, working on parallel features, committing code, creating branches, or handling branch cleanup.

Drupal Back End Specialist skill for custom module development, hooks, APIs, and PHP programming (Drupal 8-11+). Use when building custom modules, implementing hooks, working with entities, forms, plugins, or services.

Enterprise JavaScript for Node.js and browser: Node.js 22.11.0 LTS (Jod), npm 11.x, ES2025 features, async operations, module systems, package management; activates for server-side development, scripting, tooling, package management, and runtime optimization.

Best practices for Ruby on Rails development across models, controllers, services, and background jobs

Expert knowledge for deploying and operating Composable Rust applications in production. Use when setting up database migrations, configuring connection pools, implementing backup/restore procedures, tuning performance, setting up monitoring and observability, or handling operational concerns like disaster recovery and production database management.

Expert in managing GCP Groups (Google Cloud Identity and Azure AD) via the Groups API. **Use this skill whenever the user mentions 'groups', 'group members', 'add to group', or 'remove from group'.** Handles listing members (with file-based approach for large groups), adding/removing members, and checking membership. Uses ADM token authentication. **DO NOT use for ServiceNow groups.**

Handles backend integration using best practices like expo/fetch and React Query. Use when the user needs to connect to an API, handle data fetching, or implement caching.

Expert .NET 10 Debugging Strategist using CLI-first diagnosis.Use when user encounters:- Bugs, errors, exceptions in .NET/C# applications- Performance issues (slow, high CPU, memory leaks)- Crashes, deadlocks, race conditions- Need root cause analysisTriggers: "debug", "error", "exception", "crash", "memory leak", "high CPU","performance", "dotnet-dump", "dotnet-counters", "stack trace", "NullReferenceException","deadlock", "race condition", "OutOfMemoryException", "slow", "timeout"

WHEN: FastAPI project review, Pydantic models, async endpoints, dependency injectionWHAT: Pydantic validation + Dependency injection + Async patterns + OpenAPI docs + SecurityWHEN NOT: Django → django-reviewer, Flask → flask-reviewer, General Python → python-reviewer

Restructure and improve code organization without changing behavior. Use when you see REFACTOR comments, when extracting functions, or when improving code structure.

Use for LangGraph agent design and refactors. Prefer explicit state, small nodes, and clear transitions.