dev-backend

Guides backend development with API design, authentication, database, and DevOps best practices.

Updated Aug 10, 2026
One-click install
npx skills add https://github.com/Choi-Keith/skill-arsenal-ultra --skill dev-backend-choi-keith
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dev-backend
Source: https://github.com/Choi-Keith/skill-arsenal-ultra/tree/main/plugins/dev-skills/dev-backend/skills/dev-backend
Command: npx skills add https://github.com/Choi-Keith/skill-arsenal-ultra --skill dev-backend-choi-keith

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Backend development involves dozens of decisions—choosing frameworks, designing APIs, securing authentication, optimizing databases, and setting up CI/CD—and getting any of them wrong leads to security vulnerabilities, performance bottlenecks, or unmaintainable code. This Skill encodes current backend best practices (2025 standards) so the AI applies proven patterns instead of generic advice. ## Core Features & Use Cases - API Design Guidance: Covers REST, GraphQL, and gRPC patterns including pagination, versioning, error formats, and a decision matrix for choosing between them. - Security & Authentication: Implements OAuth 2.1 with PKCE, JWT best practices, RBAC, MFA/WebAuthn, Argon2id password hashing, and OWASP Top 10 mitigations. - Performance & Architecture: Provides caching strategies (Redis), database indexing and sharding, microservices patterns (saga, CQRS, circuit breaker), and event-driven design with Kafka/RabbitMQ. - Use Case: When asked to build a production REST API with user authentication, the Skill directs the AI to use NestJS or FastAPI, parameterized queries, OAuth 2.1 + JWT with 15-minute expiry, rate limiting, and a 70-20-10 testing pyramid. ## Quick Start Ask the AI to design a secure REST API with JWT authentication and PostgreSQL for your application, and it will apply the patterns from this Skill.

Frequently Asked Questions about dev-backend

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I choose between REST, GraphQL, and gRPC for my API?

Use REST for public CRUD APIs with simple caching, GraphQL when clients need flexible data fetching, and gRPC for internal microservices where performance matters. gRPC is 7-10x faster than REST but requires gRPC-Web for browsers.

What is the recommended way to hash passwords in 2025?

Use Argon2id, which replaced bcrypt as the 2025 standard. It is memory-hard, resisting GPU and ASIC attacks, with configurable memory cost (64 MB), time cost (3 iterations), and parallelism (4 threads).

How do I implement OAuth 2.1 authentication with PKCE?

Generate a code verifier and SHA-256 challenge, redirect to the authorization endpoint with the challenge, then exchange the returned code plus the verifier for tokens. OAuth 2.1 mandates PKCE for all clients and deprecates the implicit grant.

Should I use a monolith or microservices architecture?

Choose a monolith for small teams, MVPs, and unclear domain boundaries; choose microservices for large teams needing independent deployment and scaling. Avoid distributed monoliths where services are tightly coupled.

How do I fix N+1 query problems in my backend?

Replace per-record queries with JOINs or eager loading, such as using an ORM include option to fetch related records in one query. In GraphQL, use DataLoader to batch and deduplicate resolver queries.

What testing strategy does this Skill recommend for backend services?

Follow the 70-20-10 pyramid: 70% unit tests, 20% integration tests, 10% end-to-end tests. Add contract testing for microservices and always test database migrations, since most migration failures occur without tests.