skills.rest
timequity
timequityOFFICIAL
Explore all skills by this author →
GitHub

backend-core

Provide language-agnostic backend patterns for API design, authentication, security, and database management.

Updated Dec 10, 2025
Search Tags:#security#authentication#database#api#backend#patterns
One-click install
npx skills add https://github.com/timequity/vibe-coder --skill backend-core-timequity
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: backend-core
Source: https://github.com/timequity/vibe-coder/tree/main/skills/backend-core
Command: npx skills add https://github.com/timequity/vibe-coder --skill backend-core-timequity

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides foundational patterns and best practices for designing, securing, and managing backend systems, reducing common errors and improving maintainability.

Core Features & Use Cases

  • API Design: Guidance on REST, GraphQL, and gRPC conventions, including versioning and error handling.
  • Authentication: Strategies for JWT, OAuth, session-based, and passwordless authentication.
  • Security: Best practices for input validation, SQL injection prevention, XSS mitigation, and OWASP Top 10 compliance.
  • Database Management: Patterns for schema design, migrations, query optimization, and transactions.
  • Use Case: When designing a new user authentication system, consult the Authentication patterns for secure JWT flows and refresh token management.

Quick Start

Use the backend-core skill to generate a secure JWT authentication flow.

Frequently Asked Questions about backend-core

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement secure JWT authentication and refresh token management?▼

Secure JWT authentication requires implementing token generation, validation, and refresh token rotation flows. This Skill provides language-agnostic patterns for structuring JWT authentication systems, covering token signing, expiration handling, and secure refresh token management to prevent unauthorized access.

What's the best way to prevent SQL injection and mitigate XSS in backend APIs?▼

Preventing SQL injection and mitigating XSS requires strict input validation and parameterized database queries. This Skill outlines backend security patterns addressing OWASP Top 10 compliance, including input sanitization techniques and secure API endpoint design to protect server-side applications from common vulnerabilities.

What are the RESTful API design conventions for versioning and error handling?▼

RESTful API design conventions for versioning and error handling ensure predictable client-server interactions. This Skill provides language-agnostic patterns for RESTful principles, offering guidance on structuring API versioning strategies and standardizing error response formats for scalable backend systems.

Does this backend patterns guidance apply to any programming language?▼

Yes, this backend patterns guidance applies to any programming language. The Skill provides language-agnostic patterns for API design, authentication, security, and database management, focusing on universal architectural principles like OAuth 2.0 and schema best practices rather than specific framework implementations.

When do I need database schema migrations and transaction optimization patterns?▼

Database schema migrations and transaction optimization patterns are needed when building scalable backend systems that require consistent data integrity. This Skill offers database management patterns covering schema design, query optimization, and transaction handling to address common development challenges in server-side applications.

Related Skills

Explore More Software Engineering Skills→
gfcampos1gfcampos1

backend-implementation

Detect existing backend stacks and recommend language, framework, and ORM choices.

Community
Advanced
AdigunQAdigunQ

supabase-node

Develop full-stack Node.js apps with Express or Hono, Supabase, and Drizzle ORM.

Community
Intermediate
missBergmissBerg
3

eg-api-gateway

Enables the setup of a full-featured, secure, and reliable service mesh with a single command.

Community
Advanced
imMamdouhaboammarimMamdouhaboammar

agency-rapid-prototyper

Scaffold full-stack prototypes with Next.js, Prisma, and Supabase.

Community
Advanced