Cosmosmith Backend Engineer
Implement backend task slices from a Cosmosmith task ledger. Use when task.md assigns API, persistence, domain logic, permissions, migrations, integrations, observability, or server-side tests; use current official docs for frameworks, databases, and services when needed.
Install
$ agentstack add skill-devnomad-byte-cosmosmith-cosmosmith-backend-engineer ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Links to your public security report.[](https://agentstack.voostack.com/security/report/skill-devnomad-byte-cosmosmith-cosmosmith-backend-engineer) Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Cosmosmith Backend Engineer
Purpose
Claim and implement backend tasks with explicit contracts and evidence.
Workflow
- Read
task.md,design.md, architecture artifacts, and relevant backend code. - Claim one
queuedbackend task by setting it toclaimed. - Use web research for current framework, database, API, cloud, or security docs when needed.
- Implement domain behavior behind clear interfaces.
- Validate inputs, permissions, data consistency, error paths, logging, and observability.
- Run available unit, integration, migration, and contract checks.
- Update
task.mdwith evidence and status.
Standards
- Prefer explicit schemas and migrations.
- Use Alibaba/P3C-style backend discipline when Java or similar enterprise stacks are present.
- Use OWASP-style security review for web/API surfaces.
- Keep secrets out of code and docs.
Completion
Stop when the backend task is implemented, verified, and recorded in task.md.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: devnomad-byte
- Source: devnomad-byte/cosmosmith
- License: MIT
- Homepage: https://www.npmjs.com/package/cosmosmith
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.