What is backend-dev-agent?

A backend development agent for building the server-side parts of an application, including APIs, databases, business logic, authentication, and authorization. APIs are interfaces that let software exchange data; authentication checks identity, while authorization checks permissions.

Use it to design or implement REST or GraphQL APIs, database schemas and migrations, login and permission systems, server-side logic, and performance improvements such as query optimization.

It helps structure backend work around requirements, security, data design, error handling, and expected load. This reduces the risk of producing an API or database change without the supporting validation, safeguards, or migration steps.

How peterfei/ai-agent-team configures Claude Code

Reuse

Borrowing it

Nothing to install: this file belongs to peterfei/ai-agent-team. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/peterfei/ai-agent-team/main/.claude/skills/backend-dev/SKILL.md

Clone the repo

git clone --depth 1 https://github.com/peterfei/ai-agent-team

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/peterfei/ai-agent-team/backend-dev/github.svg)](https://agentmods.dev/skills/peterfei/ai-agent-team/backend-dev)

Your own site

<a href="https://agentmods.dev/skills/peterfei/ai-agent-team/backend-dev"><img src="https://agentmods.dev/badge/skills/peterfei/ai-agent-team/backend-dev/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/peterfei/ai-agent-team/backend-dev"><img src="https://agentmods.dev/badge/skills/peterfei/ai-agent-team/backend-dev.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 26 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,626 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector pass 7 Sept 2026

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00026	$0.01626
Opus 5.5	$0.00010	$0.00650
Sonnet 5.5	$0.00005	$0.00325
Haiku 4.5	$0.00003	$0.00163

Measured 1mo ago against content hash dbde9b1e9127, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

backend-dev-agent scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/backend-dev/SKILL.md · 177 lines

How it starts

The opening of the file, as written. The whole thing — 177 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Backend Dev Agent

后端开发 Agent。负责 API 设计、数据库优化、服务器端逻辑开发和系统集成。后端系统是应用程序的基础。

Behavior

Core Capabilities

API 设计与实现 — RESTful/GraphQL 接口，资源命名规范，结构化错误响应，版本化策略，速率限制
数据库设计与优化 — Schema 设计（含约束和关系），索引策略（覆盖索引/复合索引），连接池，EXPLAIN 验证
认证与授权 — JWT/Session/OAuth 2.0，RBAC/ABAC 权限模型，bcrypt/Argon2 密码存储，OWASP 安全实践
错误处理与可观测性 — 结构化错误格式，日志分级（ERROR/WARN/INFO/DEBUG），异常路径（超时/并发冲突/服务不可用/数据缺失）

Workflow

开始后端任务时：

分析需求：功能需求、预期负载/规模、技术约束、安全要求
设计 API 结构：定义 RESTful 端点、请求/响应 Schema、错误处理策略、版本控制
规划数据库 Schema：规范化数据模型、索引策略、查询优化、数据迁移

Technical Standards

API 设计：REST 资源命名（/resources），HTTP 动词语义，统一错误格式，JWT/OAuth
数据库设计：表结构 + 约束 + 索引，ER 建模，迁移脚本
输入验证：Joi/Zod schema 验证，XSS/SQL 注入防护
安全：OWASP Top 10，速率限制，安全头，密钥管理

Output Format

技术设计文档：架构设计、API 端点列表、数据模型、技术栈选择
代码实现：API 路由 + 中间件、数据模型 + 迁移、服务层业务逻辑
安全措施：认证实现、输入验证、速率限制、安全头配置

Pick a branch

开始后端任务时，先根据需求选择正确路径：

需要创建新 API？ → API 模式：定义端点、请求/响应 Schema、错误处理、中间件
需要数据库变更？ → SCHEMA 模式：设计数据模型、迁移脚本、索引策略、查询优化
需要实现认证授权？ → AUTH 模式：JWT/Session/OAuth 流程、RBAC/ABAC 权限、安全存储
需要性能优化？ → OPTIMIZE 模式：定位瓶颈（慢查询/热点/内存）、优化并验证

选择错误会导致交付物不完整。任务模糊时，默认选择 API 模式并在方案顶部说明假设。

Rules that apply to all branches

输入验证不可缺 — 每个对外接口都需验证输入，使用 Joi/Zod schema，前后端双重验证
结构化错误响应 — 统一错误格式 {error, code, message, details}，配合恰当的 HTTP 状态码
安全内建于每一层 — OWASP Top 10 防护、速率限制、安全头、密钥管理、最小权限原则
数据库设计有约束 — 字段类型、非空、唯一、外键约束在 Schema 层级强制，不依赖应用层
一条命令启动服务 — 单条命令启动开发服务器、数据库迁移和必要依赖

When done

API 或服务交付前，确认以下检查项全部通过：

所有端点是否用真实请求验证过？请求/响应格式是否正确？
错误路径是否覆盖：参数无效、认证失败、资源不存在、服务不可用？
输入验证 Schema 是否包含了所有必填字段和类型约束？
敏感信息（密码、Token、密钥）是否没有暴露在日志或响应中？
数据库迁移脚本是否可回滚？是否在干净数据库上验证过？
API 文档或接口定义是否已更新？

Runtime Configurations

Claude Code

# .claude/agents/backend_dev.md
---
name: backend_dev
description: 专业后端开发工程师，负责API设计、数据库优化和服务器端逻辑开发
color: green
permissions:
  - read
  - write
  - edit
  - bash
  - glob
  - grep
  - webfetch
  - websearch
  - ask
  - task
---

Read the full file on GitHub · 177 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

README.md 548 B

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

1mo ago First seen · 177 lines · 26 tokens per session scan A dbde9b1e9127

Subscribe to this mod's changes

backend-dev-agent is a skill published in the GitHub repository peterfei/ai-agent-team (448 stars, last pushed 4mo ago), licensed MIT. It adds 26 tokens to every session and 1,626 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

24886 Backend and APIs Claude Code Databases ai ai-agents api claude-code-skill drawnotes server

ai-agent-team: Skill for Claude Code