claude-pipeline: Agent for Claude Code

.claude/agents/laravel-backend-developer.md

laravel-backend-developer is an agent for Claude Code from aaddrick/claude-pipeline. It costs 59 tokens per session (8,632 once invoked), scanned C, original, MIT.

A specialised coding agent for PHP and Laravel backends. Laravel is a PHP framework commonly used for web applications and APIs.

In plain words
What is it for?
It is for building controllers, models, services, middleware, database migrations, APIs, authentication, and PHPUnit tests.
Why use it?
It keeps server-side work focused and directs frontend concerns to a separate agent, while setting rules for documentation, database access, and testing.

Agent for Claude Code

Written for Claude Code: installed under .claude/.

This is aaddrick/claude-pipeline's own configuration. It tells Claude Code how to work on claude-pipeline itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything claude-pipeline configures →

Needs its repository: it runs a file that does not travel with it, so clone the repository first. The line is ./scripts/start-dev.sh.

Reuse

Borrowing it

Nothing to install: this file belongs to aaddrick/claude-pipeline. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/aaddrick/claude-pipeline/main/.claude/agents/laravel-backend-developer.md
Clone the repo
git clone --depth 1 https://github.com/aaddrick/claude-pipeline

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for laravel-backend-developer

README.md
[![agentmods](https://agentmods.dev/badge/agents/aaddrick/claude-pipeline/laravel-backend-developer.svg)](https://agentmods.dev/agents/aaddrick/claude-pipeline/laravel-backend-developer)
Your own site
<a href="https://agentmods.dev/agents/aaddrick/claude-pipeline/laravel-backend-developer"><img src="https://agentmods.dev/badge/agents/aaddrick/claude-pipeline/laravel-backend-developer.svg" alt="Measured on agentmods" height="20"></a>
Per session 59 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 8,632 The whole file, excluding the scripts and references it only reads on demand.
Security scan C 2 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00059 $0.08632
Opus 5 $0.00030 $0.04316
Sonnet 5 $0.00012 $0.01726
Haiku 4.5 $0.00006 $0.00863

Measured 8d ago against content hash e39b3c9a5235, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-08, from the pricing page.

Security

Grade C, and why

laravel-backend-developer scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reaches for credential fileshighPrivilege escalation

SSH keys, cloud credentials, git-credentials, .npmrc, /etc/shadow: reading these is how a config file becomes a credential leak.

- **Local**: `.env` file with `AWS_ENABLED=true` + `~/.aws/credentials`

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl http://localhost:8000/debug/auth-config
.claude/agents/laravel-backend-developer.md · 1,220 lines

How it starts

The opening of the file, as written. The whole thing — 1,220 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You are a senior backend developer with deep expertise in Laravel, PHP, and server-side architecture. You specialize in building robust, scalable backend systems with clean architecture and secure coding practices.

Frontend Deferral: For CSS, styling, responsive design, accessibility, Blade template layout/structure, JavaScript interactions, or any frontend-focused work, defer to the bulletproof-frontend-developer agent. Your focus is PHP, Laravel, APIs, database, and server-side logic.

Documentation Policy

DO NOT write docblocks or comments. Documentation is handled separately by the phpdoc-writer agent after implementation is complete. Focus exclusively on writing clean, working code.

  • Do not add PHPDoc blocks to classes, methods, or properties
  • Do not add inline comments explaining code logic
  • Do not add TODO comments
  • Rely on type hints and clear naming to convey intent

The phpdoc-writer agent will add comprehensive documentation after your work is complete.


Anti-Patterns to Avoid

  • N+1 query prevention -- always eager load relationships with with(). Never query inside loops or Blade @foreach. Use Model::preventLazyLoading() in development to catch violations.
  • Never use Model::all() on large tables -- use pagination, scoped queries, or select() to limit data.
  • Use config() not env() -- never call env() outside of config files. After config:cache, env() returns null.
  • Chunk large datasets -- use chunk() or chunkById() for batch operations instead of loading everything into memory.
  • Type hints over DocBlocks -- PHP 8.2 typed properties and return types replace most DocBlocks. Remove DocBlocks that only restate the type signature.
  • Prefer DI over new -- use constructor injection via the service container. Flag new ClassName where DI should be used instead.
  • Mass assignment protection -- always define $fillable or $guarded on models. Never use $guarded = [] in production.
  • Use dispatchAfterResponse() -- for short async tasks after HTTP response (e.g., tracking events). Use queued jobs for heavier work.
  • Arrange-Act-Assert in tests -- structure tests using AAA pattern. Use Http::fake() and Http::preventStrayRequests() to prevent real HTTP calls in tests.

Read the full file on GitHub · 1,220 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 1,220 lines · 59 tokens per session scan C e39b3c9a5235

Subscribe to this mod's changes

laravel-backend-developer is an agent published in the GitHub repository aaddrick/claude-pipeline (128 stars, last pushed 6mo ago), licensed MIT. It adds 59 tokens to every session and 8,632 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it C with 2 findings (reaches for credential files, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other agents, from other repositories

Laravel Expert Agent

Expert Laravel development assistant specializing in modern Laravel 12+ applications with Eloquent, Artisan, testing, and best practices.

github/awesome-copilot · 27 tokens

php-developer

Write idiomatic PHP code with design patterns, SOLID principles, and modern best practices. Implements PSR standards, dependency injection, and comprehensive testing. Use PROACTIVELY for PHP architecture, refactoring, or implementing design patterns.

davepoon/buildwithclaude · 51 tokens

php-general-engineer

PHP development: features, debugging, code quality, security, modern PHP 8.x patterns.

notque/vexjoy-agent · 24 tokens

symfony-engineer

Implements Symfony application code following framework best practices, drawing on the superpowers-symfony skill library. Use for general Symfony coding — controllers, services, dependency injection, value objects/DTOs, forms, Twig components, configuration — when no more specialized agent (api-platform-builder…

dev-toolings/superpowers-symfony · 76 tokens

php-developer

Implementación de código PHP/Laravel siguiendo specs SDD aprobadas. Usar PROACTIVELY cuando: se implementa una feature en PHP/Laravel (controllers, services, migrations, models), se refactoriza código existente, o se corrige un bug con spec definida. SIEMPRE requiere una Spec SDD aprobada antes de empezar.

gonzalezpazmonica/savia · 77 tokens

api-infrastructure-generator

API & infrastructure patterns generator. Creates ADR (Action-Domain-Responder), API Versioning, Health Check, Unit of Work, Idempotency Handler, Structured Logger, Access Control, Distributed Lock, Read-Write Proxy, and Metrics Collector components for PHP 8.4. Called by acc:pattern-generator coordinator.

dykyi-roman/awesome-claude-code · 69 tokens