php-agents-boilerplate: Agent for Claude Code

.claude/agents/backend-dev.md

backend-dev is an agent for Claude Code from velesnitski/php-agents-boilerplate. It costs 13 tokens per session (381 once invoked), scanned A, original, MIT.

An agent for developing server-side PHP code, including application logic and web APIs.

In plain words
What is it for?
Use it to implement or review backend features, build API endpoints, validate input, work with Eloquent or the query builder, and report changes and test results.
Why use it?
It provides a defined workflow for understanding existing code, making changes, and running tests while following common Laravel and PHP practices.

Agent for Claude Code

Written for Claude Code: installed under .claude/. Also seen: model in frontmatter.

This is velesnitski/php-agents-boilerplate's own configuration. It tells Claude Code how to work on php-agents-boilerplate itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything php-agents-boilerplate configures →

Reuse

Borrowing it

Nothing to install: this file belongs to velesnitski/php-agents-boilerplate. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/velesnitski/php-agents-boilerplate/main/.claude/agents/backend-dev.md
Clone the repo
git clone --depth 1 https://github.com/velesnitski/php-agents-boilerplate

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for backend-dev

README.md
[![agentmods](https://agentmods.dev/badge/agents/velesnitski/php-agents-boilerplate/backend-dev/github.svg)](https://agentmods.dev/agents/velesnitski/php-agents-boilerplate/backend-dev)
Your own site
<a href="https://agentmods.dev/agents/velesnitski/php-agents-boilerplate/backend-dev"><img src="https://agentmods.dev/badge/agents/velesnitski/php-agents-boilerplate/backend-dev/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for backend-dev

Your own site · 80×15
<a href="https://agentmods.dev/agents/velesnitski/php-agents-boilerplate/backend-dev"><img src="https://agentmods.dev/badge/agents/velesnitski/php-agents-boilerplate/backend-dev.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 13 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 381 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00013 $0.00381
Opus 5.5 $0.00005 $0.00152
Sonnet 5.5 $0.00003 $0.00076
Haiku 4.5 $0.00001 $0.00038

Measured 11d ago against content hash be9de79f623e, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

backend-dev scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/agents/backend-dev.md · 57 lines

What it actually says

Backend Dev

You are a senior PHP backend developer. You write, review, and refactor server-side code.

Workflow

  1. Read the task description from Router
  2. Explore relevant code – understand before changing
  3. Implement the solution
  4. Run existing tests (php artisan test or phpunit)
  5. Return a structured report to Router

Output Format

## Changes
- file1.php: what changed and why
- file2.php: what changed and why

## Tests
- Ran: X passed, Y failed
- New tests added: list

## Notes
- Migration needed: yes/no (if yes, describe for DBA)
- Config changes: list any new env vars
- Breaking changes: list any API contract changes

Technical Standards

  • Follow PSR-12 coding style
  • Use framework conventions (Eloquent, service classes, form requests)
  • Never use raw SQL in application code – use query builder or Eloquent
  • Never call env() outside config files
  • Validate all user input via form requests or validation rules
  • Use dependency injection, not facades in business logic classes
  • Write tests for new logic – at minimum, feature tests for API endpoints

What you do NOT do

  • Never run migrations or touch the database schema – that's DBA's job
  • Never deploy or restart services – that's Ops
  • Never modify CI/CD pipelines, Dockerfiles, or infra configs
  • Never approve your own changes – QA and user review required
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 11d ago Changed · +1 lines be9de79f623e
  2. 2mo ago First seen · 56 lines · 13 tokens per session scan A 2960d15c3e1e

Subscribe to this mod's changes

backend-dev is an agent published in the GitHub repository velesnitski/php-agents-boilerplate (2 stars, last pushed 11d ago), licensed MIT. It adds 13 tokens to every session and 381 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

backend-dev compared with agents from other repositories

backend-dev next to 6 agents from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
backend-devvelesnitski/php-agents-boilerplateAgent211d agoMITA13Claude Code
Laravel Expert Agentgithub/awesome-copilotAgent41kyesterdayMITA27Claude Code
php-developerdavepoon/buildwithclaudeAgent3.7kyesterdayMITA51Claude Code
php-general-engineernotque/vexjoy-agentAgent4464d agoMITA24Claude Code
laravel-architectAratKruglik/claude-sdlcAgent5511d agoMITA102Claude Code
symfony-engineerdev-toolings/superpowers-symfonyAgent2311mo agoMITA76Claude Code
laravel-proJosephHampton/awesome-gemini-cli-subagentsAgent937d agoCC0-1.0A32Claude Code