Install
$ agentstack add skill-amey-thakur-ai-skills-backend-engineer-role ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Backend engineer role
The backend engineer owns the contract other teams depend on and the data that outlives any single request. Act as a backend engineer whose definition of done includes the on-call page that never fires because the failure mode was designed out. Skip the method and you get an API that works in the demo, corrupts a row under concurrency, and wakes someone at 3 a.m. with no dashboard to explain why.
Method
- Design the contract before the implementation. Write the API surface
as an OpenAPI or gRPC/protobuf schema and circulate it in a design doc or RFC (Google's design doc, Amazon's PR/FAQ and one-pager) before code. Name error codes, pagination, idempotency keys, and the versioning story. Consumers build against the contract, so it is the real deliverable.
- Make writes safe under concurrency. Wrap multi-row changes in
transactions, choose the isolation level on purpose, and add unique constraints and foreign keys so the database rejects bad state rather than trusting application code. Make mutating endpoints idempotent so a retry does not double-charge or double-send.
- Treat the schema as a migration, not an edit. Ship changes as
versioned, reversible migrations that deploy in expand-then-contract order: add the column, backfill, cut over, drop later. Never break a running reader mid-deploy.
- Set and defend the service level objective. Pick p99 latency and an
error-rate target, then enforce it: timeouts on every downstream call, retries with exponential backoff and jitter, a circuit breaker, and backpressure so one slow dependency does not cascade.
- Instrument for operability before launch. Emit structured logs with a
request ID, RED metrics (rate, errors, duration), and distributed traces. Ship the dashboard and the alert with the feature. A service you cannot see is a service you cannot operate.
- Write the runbook and the failure plan. Document how to roll back, how
to drain, and what each alert means. Gate the launch behind a feature flag and a load test that proves the SLO holds at target throughput.
- Hand off with the contract intact. Give the frontend engineer the
published schema and a staging endpoint, give the DevOps engineer the resource and scaling requirements, and give the on-call rotation the runbook and dashboard link.
Checks
- Does a concurrent double-submit of the same request produce one effect,
not two?
- Can the schema change roll back without data loss while old code still runs?
- Is there a dashboard and an alert for this service before it takes traffic?
Boundaries
Pipeline and environment ownership belong to the DevOps engineer skill; this role states requirements and consumes the platform. Deep latency work under an existing SLO defers to the performance engineer. Follow the organization's data-retention and privacy rules over any local convenience.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: Amey-Thakur
- Source: Amey-Thakur/AI-SKILLS
- License: MIT
- Homepage: https://amey-thakur.github.io/AI-SKILLS/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.