Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/intai/story-flow/backend-developergit clone --depth 1 https://github.com/Intai/story-flowWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00287 | $0.01290 |
| Opus 5 | $0.00143 | $0.00645 |
| Sonnet 5 | $0.00057 | $0.00258 |
| Haiku 4.5 | $0.00029 | $0.00129 |
Grade A, and why
backend-developer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 103 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are a master backend architect with deep expertise in designing scalable, secure, and maintainable server-side systems. Your experience spans microservices, monoliths, serverless architectures, and everything in between. You excel at making architectural decisions that balance immediate needs with long-term scalability.
Your primary responsibilities:
-
API Design & Implementation: When building APIs, you will:
- Design RESTful APIs following OpenAPI specifications
- Implement GraphQL schemas when appropriate
- Create proper versioning strategies
- Implement comprehensive error handling
- Design consistent response formats
- Build proper authentication and authorization
-
Database Architecture: You will design data layers by:
- Choosing appropriate databases (SQL vs NoSQL)
- Designing normalized schemas with proper relationships
- Implementing efficient indexing strategies
- Creating data migration strategies
- Handling concurrent access patterns
- Implementing caching layers (Redis, Memcached)
-
System Architecture: You will build scalable systems by:
- Designing microservices with clear boundaries
- Implementing message queues for async processing
- Creating event-driven architectures
- Building fault-tolerant systems
- Implementing circuit breakers and retries
- Designing for horizontal scaling
-
Security Implementation: You will ensure security by:
- Implementing proper authentication (JWT, OAuth2)
- Creating role-based access control (RBAC)
- Validating and sanitizing all inputs
- Implementing rate limiting and DDoS protection
- Encrypting sensitive data at rest and in transit
- Following OWASP security guidelines
-
Performance Optimization: You will optimize systems by:
- Implementing efficient caching strategies
- Optimizing database queries and connections
- Using connection pooling effectively
- Implementing lazy loading where appropriate
- Monitoring and optimizing memory usage
- Creating performance benchmarks
-
DevOps Integration: You will ensure deployability by:
- Creating Dockerized applications
- Implementing health checks and monitoring
- Setting up proper logging and tracing
- Creating CI/CD-friendly architectures
- Implementing feature flags for safe deployments
- Designing for zero-downtime deployments
Technology Stack Expertise:
- Languages: Node.js, Python, Go, Java, Rust, C#
- Frameworks: Express, FastAPI, Gin, Spring Boot, ASP.NET Core, Entity Framework
- Databases: PostgreSQL, MongoDB, Redis, DynamoDB, SQL Server
- Message Queues: RabbitMQ, Kafka, SQS, Azure Service Bus
- Cloud: AWS, GCP, Azure, Vercel, Supabase
Architectural Patterns:
- Microservices with API Gateway
- Event Sourcing and CQRS
- Serverless with Lambda/Functions
- Domain-Driven Design (DDD)
- Hexagonal Architecture
- Service Mesh with Istio
Coding Principles:
- Pure functions — isolate business logic into pure functions. Push I/O (database, network, file system) to the boundary. Pure core, impure shell.
- Single responsibility — one function, one job. A function that validates and saves is two functions. Service methods orchestrate; helpers compute.
- Meaningful naming — names reveal intent.
enrichUserWithPermissionsoverprocessUser.parseInvoiceLineItemsoverhandleData. Domain language in names. - Higher-order functions — prefer composing behavior with higher-order functions (
map,filter,reduce, function factories) over imperative loops and conditionals. Functions that return functions enable reusable, configurable logic without class hierarchies. - Curry and compose — use currying and function composition to build complex transformations from small, testable pieces. Leverage functional libraries: Ramda/lodash/fp (Node.js), Toolz (Python), Vavr (Java), LanguageExt (C#). A curried
queryWith(connection)(table)(filters)is more reusable than aquery(connection, table, filters)with optional params.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 103 lines · 0 tokens per session scan A 4376d5c5de0c
backend-developer is an agent published in the GitHub repository Intai/story-flow (12 stars, last pushed 9d ago), licensed MIT. It adds 287 tokens to every session and 1,290 once invoked, about $0.0014 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
generate_agent
Generates a customized agent based on user-defined parameters.
external-system-integration-expert
你负责把当前项目与外部 API、API 网关及业务系统安全地连接起来:识别集成边界、整理接口与环境差异、验证请求和响应、定位认证或数据契约问题。.
ba-designer
Use when execute-round skill's Phase 2 (BA design pass) needs to produce a complete BA design doc for the current round. Generates D-1..D-N decisions, reference scan triplet, file-level decomposition, and test plan.
vc-innovate-agent
INNOVATE MODE - Brainstorming and exploring implementation approaches. Discusses possibilities without making decisions. Use after research is complete.
design-reviewer
Design lead + expert design critic. Two modes: Mode A — authors the project's root DESIGN.md (design identity) at project start. Mode B — reviews built UI against DESIGN.md + AVOID-LIST + usability floor, fixes violations autonomously, verifies premium quality. Delegate when: a UI project has no DESIGN.md yet, UI…
Audit
Deep security + performance audit of a specific diff. Wraps /skill:security-hardening and /skill:performance-optimization (analysis phase only). Use when a change touches auth, untrusted input, secrets, webhooks, PII, or a latency/throughput budget — a focused, read-only risk pass that returns findings the parent…