ck:backend-development

Design REST, GraphQL, and gRPC APIs with OAuth 2.1, JWT, RBAC, and MFA.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/MinhQuyen274/smartify --skill ck-backend-development-minhquyen274
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ck:backend-development
Source: https://github.com/MinhQuyen274/smartify/tree/main/Frontend_PROJECT_Figma/.opencode/skills/backend-development
Command: npx skills add https://github.com/MinhQuyen274/smartify --skill ck-backend-development-minhquyen274

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

It helps you design and implement production-ready backend services by providing clear guidance for API design, authentication/authorization, data modeling, security hardening, testing, performance, and deployment practices.

Core Features & Use Cases

  • API Design for REST, GraphQL, and gRPC: Choose the right API style and implement consistent endpoints, pagination, filtering, versioning, and robust error handling.
  • Security-First Backend Engineering: Apply OWASP Top 10 mitigations, implement OAuth 2.1 + PKCE, JWT validation, RBAC, MFA, secure sessions, and strong input validation (with a strong emphasis on parameterized queries).
  • Scalable Architecture & Production Ops: Plan microservices/event-driven patterns, performance optimization (indexes, connection pooling, Redis caching), and reliable DevOps workflows (Docker/Kubernetes, CI/CD, monitoring, tracing).

Quick Start

Ask the AI to help you plan and implement a secure production backend by specifying: your API type (REST/GraphQL/gRPC), auth approach (OAuth 2.1 + JWT with RBAC and MFA), database choice (PostgreSQL vs MongoDB), and the target deployment environment (Docker/Kubernetes).

Frequently Asked Questions about ck:backend-development

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement secure backend authentication using OAuth 2.1 and JWT?

To implement secure backend authentication using OAuth 2.1 and JWT, you apply PKCE flows, validate JWT tokens, configure RBAC, and enforce MFA to satisfy OWASP-aligned security mitigations for production-ready APIs.

What is the best way to design REST, GraphQL, and gRPC APIs for scalable microservices?

The best way to design REST, GraphQL, and gRPC APIs for microservices is to select the appropriate API style, implement consistent pagination and filtering, establish robust error handling, and plan event-driven architecture patterns.

How do I optimize backend database performance with caching and connection pooling?

Optimize backend database performance by applying strategic database indexing decisions, implementing Redis caching layers, and configuring connection pooling to ensure durable data access patterns and reduced latency.

Can I use Kubernetes and Docker for backend deployment and operational readiness?

Yes, you can use Kubernetes and Docker to achieve operational readiness by establishing reliable DevOps workflows, configuring CI/CD pipelines, and setting up comprehensive monitoring and tracing for microservices deployment.

Do I need OWASP mitigations and parameterized queries for production-ready APIs?

Yes, production-ready APIs require OWASP Top 10 mitigations and strong input validation using parameterized queries to prevent injection attacks and ensure backend security hardening against common vulnerabilities.