後端開發

Web API 測試實作技能,協助開發者使用 Testcontainers + Reqnroll 撰寫完整的 API 整合測試,包含 Docker 測試環境、BDD 情境定義與測試步驟實作。

Redesign React components and pages for healthcare SaaS with premium Apple/Uber-like aesthetics while preserving ALL existing logic, hooks, state management, API calls, and event handlers. Use this skill when the user requests to redesign, make premium, improve the look of, or beautify existing React code. Also use when the user provides design inspiration screenshots to adapt. The skill treats all functionality as sacred and focuses purely on visual transformation - layout, styling, typography, colors, spacing, and modern component structures can change freely, but hooks order, state management, backend communication, and all interactions must remain 100% intact.

Build type-safe APIs with Hono - fast, lightweight routing for Cloudflare Workers, Deno, Bun, and Node.js. Set up routing patterns, middleware composition, request validation (Zod/Valibot/Typia/ArkType), RPC client/server with full type inference, and error handling with HTTPException.Use when: building APIs with Hono, setting up request validation with schema libraries, creating type-safe RPC client/server communication, implementing custom middleware chains, handling errors with HTTPException, extending context with custom variables, or troubleshooting middleware type inference issues, validation hook confusion, RPC performance problems, or middleware response typing errors.

Comprehensive n8n workflow testing including execution lifecycle, node connection patterns, data flow validation, and error handling strategies. Use when testing n8n workflow automation applications.

Optimize Node.js application performance with caching, clustering, profiling, and monitoring techniques

Apply when designing error responses, implementing error handlers, and ensuring consistent error format across APIs.

Autonomous failure recovery and self-healing loop for tasks, benchmarks, or services. Use when a run fails, dependencies break, or the system must diagnose, remediate, and re-run safely under guardrails.

Use BEFORE implementing, writing, configuring, or setting up ANY feature involving libraries, frameworks, or complex APIs - even before reading existing code. Fetches current documentation to ensure correct usage. Triggers on third-party libraries (such as react-query, FastAPI, Django, pytest), complex standard library modules (such as subprocess, streams, pathlib, logging), and "how to" questions about library usage. Do NOT use for trivial built-ins (such as dict.get, Array.map) or pure algorithms. Load this skill first to receive guidance on finding current documentation when implementing features, exploring code, or answering library-related questions.

Master Rails 7+ patterns with MVC, Active Record, Hotwire, Action Cable, and modern Rails development practices.

LLM safety guardrails and content moderation

Detects and prevents multi-tenant architecture violations in Django multi-tenant applications. This skill should be used when working with ORM queries, ViewSets, Services, or database operations to enforce transparent tenant isolation and prevent manual tenant_id filtering.

Build robust backend systems with modern technologies (Node.js, Python, Go, Rust), frameworks (NestJS, FastAPI, Django), databases (PostgreSQL, MongoDB, Redis), APIs (REST, GraphQL, gRPC), authentication (OAuth 2.1, JWT), testing strategies, security best practices (OWASP Top 10), performance optimization, scalability patterns (microservices, caching, sharding), DevOps practices (Docker, Kubernetes, CI/CD), and monitoring. Use when designing APIs, implementing authentication, optimizing database queries, setting up CI/CD pipelines, handling security vulnerabilities, building microservices, or developing production-ready backend systems. | Sử dụng khi xây dựng API, server, backend, máy chủ, xử lý dữ liệu, endpoint, microservices.

Detect and report drift between database schema and code data models. Works with SQLAlchemy, Django ORM, Prisma, TypeORM, and other ORMs. Generic across any project.

Systematically discover edge cases through boundary analysis and input space exploration. Use when: (1) asked to find edge cases or validate correctness, (2) correctness claims rest on happy-path testing without boundary exploration, (3) code accepts inputs with implicit assumptions about range, format, or type that have not been verified, (4) code is about to ship or correctness is claimed without having mapped the boundary surface.

Security best practices, API key management, input validation. Use when handling secrets, user input, or security-sensitive code.

Master Laravel 11 with Eloquent ORM, routing, middleware, queues, testing, and modern PHP development patterns.

Integrate Dapr for pub/sub messaging and scheduled jobs. Use this skill when implementing event-driven architectures with Dapr, handling CloudEvent message formats, setting up pub/sub subscriptions, or scheduling jobs with Dapr Jobs API. Covers common pitfalls like CloudEvent unwrapping and callback URL patterns.

Implement robust error handling in Node.js with custom error classes, async patterns, Express middleware, and production monitoring

Staging and production deployment using Laravel Deployer with health checks, cache management, and rollback support (HUMAN-ONLY execution)

Understand resource exhaustion and denial of service vulnerabilities in AI code including unbounded loops, missing rate limits, and uncontrolled resource consumption. Use this skill when you need to learn about DoS vulnerabilities in AI code, understand resource limits, recognize unbounded operations, or prevent resource exhaustion. Triggers include "resource exhaustion", "DoS vulnerabilities", "denial of service", "unbounded resources", "API cost protection", "memory exhaustion", "uncontrolled consumption", "rate limiting DoS".