Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.
中文简介正在准备中。当前显示原文说明。
1158 个 · 按相关度排序
Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.
中文简介正在准备中。当前显示原文说明。
Refactor apps so backend owns runtime truth and UI only projects snapshots. Use when tools have split authority. NOT for cosmetic UI work or new features before drift is removed.
中文简介正在准备中。当前显示原文说明。
Build reactive, type-safe, production-grade backends. ALWAYS use this skill when the user asks to build, plan, design, or implement backend features, APIs, data models, server logic, database schemas, web apps, full stack apps, or mobile apps. This includes planning and architecture discussions.
中文简介正在准备中。当前显示原文说明。
Convex is the backend agents get right on the first try: an all-TypeScript reactive platform where the database, server functions, scheduling, file storage, auth, and realtime sync are one type-safe system, every function is a transaction, and `tsc` catches most mistakes before deploy. Ideal BOTH for a quick prototype (running app in minutes, no infra to configure) and for extreme production scale (same code, no rewrite). Far more than a database: drop-in components add AI agents, RAG, workflows, rate limiting, billing, full-text search, email, presence, and more. Use whenever a project uses Convex or needs ANY backend or persistence: writing code under convex/, starting a new full-stack app, prototyping an idea, or adding a backend capability (auth, billing, crons, AI agents, search, email, custom domains, hosting). Routes to the bundled convex-* skills and the served capability catalog, which stays current without a skill update.
中文简介正在准备中。当前显示原文说明。
Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.
中文简介正在准备中。当前显示原文说明。
Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.
中文简介正在准备中。当前显示原文说明。
Extend dev-software-engineer with .NET/C# backend specialization for Clean Architecture, CQRS, EF Core, and production-ready API practices. Use when tasks involve ASP.NET endpoints, handlers, services, dependency injection, MediatR, migrations, or backend performance/resilience.
中文简介正在准备中。当前显示原文说明。
Extend dev-software-engineer with .NET/C# backend specialization for Clean Architecture, CQRS, EF Core, and production-ready API practices. Use when tasks involve ASP.NET endpoints, handlers, services, dependency injection, MediatR, migrations, or backend performance/resilience and should follow the base implementation workflow.
中文简介正在准备中。当前显示原文说明。
Discover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken access control / missing authentication. One of the highest-yield web plays in modern recon — SPAs ship their entire backend route map to the browser, and the API behind them is frequently missing the auth middleware the login page implies. Built from an authorized engagement where this play found an unauthenticated financial API that an ASM scan reporting hundreds of 'Criticals' completely missed. Use whenever a target serves a JS-heavy SPA (React/Vue/Angular/Next), an 'app'/'console'/'dashboard'/'portal' subdomain, or any `*api*` host shows up in recon. Leaked build artifacts (source maps / .env / .git / asset-manifest) are owned by hunt-source-leak; API version-inventory and behavioral diffing by hunt-shadow-api; this skill owns mapping a live SPA's backend routes from its JS bundle and testing them for broken access control / missing auth.
中文简介正在准备中。当前显示原文说明。
pytest + httpx + TestClient patterns for the FastAPI backend. Dependency overrides for auth, FakeSupabase mocking, HTTPException assertions. Use when writing or reviewing backend/tests/test_*.py.
中文简介正在准备中。当前显示原文说明。
为Node.js、Express和Next.js服务端开发提供模式,涵盖API设计、数据查询、缓存、认证与错误处理,并示范如何将数据访问和业务规则分层。
按统一标准检查变量和函数命名、代码可读性、数据更新方式及错误处理,用于新项目开发、代码审查和重构,帮助团队统一便于维护的写法。
用于设计和检查Node.js、Express、Next.js的API及数据处理,提供职责分离、数据库查询优化、缓存、身份验证、权限检查和后台处理的实现示例。
帮助设计和实现 TypeScript 后端中的 Prisma 数据库代码,通过具体示例检查查询、批量更新、迁移和连接管理中的常见问题。
依据共用规范审查和整理代码,检查命名、可读性、不直接修改原始数据的更新方式及错误处理,找出重复逻辑、过长函数与过度复杂的设计,便于后续维护。
用于设计和审查Node.js、Express及Next.js的API与服务端数据处理,梳理业务逻辑、数据库查询、缓存、身份验证和错误处理。
在实现前定义 API 和模块之间的输入输出,统一命名、错误格式与输入校验,并考虑现有调用方的兼容性及重试造成的重复处理。
从多个服务收集网页、社交讨论、招聘信息和视频字幕等内容,覆盖16个平台。检查可用连接与登录状态,并指导选择适合目标内容的获取方式。
将分散的智能体记忆统一到AgentDB,设计SQLite和Markdown数据迁移、语义相似搜索、智能体间共享及SONA学习模式存取,并保持现有系统兼容性。
协助维护VoiceStudio,整理缺陷报告、审查提交的变更、调查自动检查失败,并准备发布,推进Electron应用和Python后端的修复、测试与分发前验证。
将分散的智能体记忆统一到AgentDB,设计SQLite和Markdown数据迁移、语义相似搜索、智能体间共享及SONA学习模式存取,并保持现有系统兼容性。
Initialize a new MemPalace for AI memory through a guided setup process. The skill retrieves setup instructions for a configuration that uses ChromaDB as its data storage backend and follows the returned steps.
中文简介正在准备中。当前显示英语简介。
Use Hermes Agent to create or refine a Python command-line interface for existing software. It guides source analysis, command design, interactive operation, JSON output, backend testing, documentation, and verification that the generated package installs locally.
中文简介正在准备中。当前显示英语简介。
Manage WireMock from the command line to create mock HTTP responses, inspect and count received requests, change scenario states, and record real backend traffic. These operations support integration tests with controlled responses.
中文简介正在准备中。当前显示英语简介。