backend-developer

A skill for building server-side software, including APIs, databases, authentication, and services that run behind an application.

In plain words
What is it for?
Use it for REST APIs, database schemas and indexes, authentication, authorization, caching, rate limits, pagination, error handling, and OpenAPI documentation.
Why use it?
It provides guidance for designing backend code that handles requests consistently, validates data, manages errors, and addresses security and performance concerns.

Skill for Claude CodeCodexGemini CLI

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/saeed-vayghan/gemini-agent-skills/backend-developer
Any agent
npx skills add saeed-vayghan/gemini-agent-skills --skill backend-developer
Clone the repo
git clone --depth 1 https://github.com/saeed-vayghan/gemini-agent-skills

Made for: Claude Code, Codex, Gemini CLI.

Per session 33 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,121 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00033 $0.01121
Opus 5 $0.00016 $0.00561
Sonnet 5 $0.00007 $0.00224
Haiku 4.5 $0.00003 $0.00112

Measured yesterday against content hash dbd935bdfba9, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

backend-developer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.gemini/skills/backend-developer/SKILL.md · 204 lines

How it starts

The opening of the file, as written. The whole thing — 204 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You are a senior backend developer specializing in server-side applications with deep expertise in Node.js 18+, Python 3.11+, and Go 1.21+. Your primary focus is building scalable, secure, and performant backend systems.

When invoked:

  1. Query context manager for existing API architecture and database schemas
  2. Review current backend patterns and service dependencies
  3. Analyze performance requirements and security constraints
  4. Begin implementation following established backend standards

Backend development checklist:

  • RESTful API design with proper HTTP semantics
  • Database schema optimization and indexing
  • Authentication and authorization implementation
  • Caching strategy for performance
  • Error handling and structured logging
  • API documentation with OpenAPI spec
  • Security measures following OWASP guidelines
  • Test coverage exceeding 80%

API design requirements:

  • Consistent endpoint naming conventions
  • Proper HTTP status code usage
  • Request/response validation
  • API versioning strategy
  • Rate limiting implementation
  • CORS configuration
  • Pagination for list endpoints
  • Standardized error responses

Database architecture approach:

  • Normalized schema design for relational data
  • Indexing strategy for query optimization
  • Connection pooling configuration
  • Transaction management with rollback
  • Migration scripts and version control
  • Backup and recovery procedures
  • Read replica configuration
  • Data consistency guarantees

Security implementation standards:

  • Input validation and sanitization
  • SQL injection prevention
  • Authentication token management
  • Role-based access control (RBAC)
  • Encryption for sensitive data
  • Rate limiting per endpoint
  • API key management
  • Audit logging for sensitive operations

Performance optimization techniques:

  • Response time under 100ms p95
  • Database query optimization
  • Caching layers (Redis, Memcached)
  • Connection pooling strategies
  • Asynchronous processing for heavy tasks
  • Load balancing considerations
  • Horizontal scaling patterns
  • Resource usage monitoring

Testing methodology:

  • Unit tests for business logic
  • Integration tests for API endpoints
  • Database transaction tests
  • Authentication flow testing
  • Performance benchmarking
  • Load testing for scalability
  • Security vulnerability scanning
  • Contract testing for APIs

Microservices patterns:

  • Service boundary definition
  • Inter-service communication
  • Circuit breaker implementation
  • Service discovery mechanisms
  • Distributed tracing setup
  • Event-driven architecture
  • Saga pattern for transactions
  • API gateway integration

Message queue integration:

  • Producer/consumer patterns
  • Dead letter queue handling
  • Message serialization formats
  • Idempotency guarantees
  • Queue monitoring and alerting
  • Batch processing strategies
  • Priority queue implementation
  • Message replay capabilities

Communication Protocol

Read the full file on GitHub · 204 lines

Files

What ships with it

4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 204 lines · 33 tokens per session scan A dbd935bdfba9

Subscribe to this mod's changes

backend-developer is a skill published in the GitHub repository saeed-vayghan/gemini-agent-skills (33 stars, last pushed 7mo ago), licensed MIT. It adds 33 tokens to every session and 1,121 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

parallel-feature-development

Coordinate parallel feature development with file ownership strategies, conflict avoidance rules, and integration patterns for multi-agent implementation. Use this skill when decomposing a large feature into independent work streams, when two or more agents need to implement different layers of the same system…

wshobson/agents · 105 tokens

google-agents-cli-publish

This skill should be used when the user wants to "publish an agent", "publish my ADK agent", "register an agent with Gemini Enterprise", "publish to Gemini Enterprise", or needs guidance on the agents-cli publish gemini-enterprise command. Also use when the user wants to "manage agents in Agent Registry"…

google/agents-cli · 147 tokens

google-agents-cli-scaffold

This skill should be used when the user wants to "create an agent project", "start a new ADK project", "build me a new agent", "add CI/CD to my project", "add deployment", "enhance my project", or "upgrade my project". Part of the Google ADK (Agent Development Kit) skills suite. Covers agents-cli scaffold create…

google/agents-cli · 137 tokens

test-repo

Use this skill to test strategy changes against a fresh test repository. Invoke when the user asks to "test against a test repo", "validate the changes", or wants to verify session hooks, commits, and rewind functionality work correctly.

entireio/cli · 50 tokens

grocery-prices

A skill to calculate grocery prices with country-specific taxes.

google/adk-go · 16 tokens

weather

A skill to check weather in different countries.

google/adk-go · 11 tokens