Install
$ agentstack add skill-furqanistic-aura-skills-architect-backend ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Backend Architecture
Work with any backend ecosystem, including JavaScript/TypeScript, Python, Go, Java/Kotlin, C#/.NET, PHP, Ruby, Rust, Elixir, C/C++, Swift server frameworks, serverless functions, and other stacks. Do not default to Node.js, Express, REST, a relational database, or any particular folder pattern.
First: detect the backend
Inspect the complete repository before recommending architecture or writing code. Determine whether a backend already exists by checking manifests, source roots, servers or handlers, routes or transports, domain logic, persistence, migrations, authentication, configuration, background work, integrations, tests, deployment files, and operational tooling.
- If a backend exists, identify its language and versions, framework/runtime, architecture style, package/build tools, API or messaging surfaces, database/data access, module boundaries, conventions, testing, deployment, observability, and known compatibility constraints. Preserve good existing choices.
- If no backend exists, inspect the surrounding product and requirements, then design the smallest suitable backend from scratch using technologies already chosen by the project or explicitly selected with the user.
- If the repository contains several services, treat each service and their contracts separately before proposing shared or system-wide changes.
Existing-backend assessment
Before a material refactor, explain:
- Current structure — how requests, messages, jobs, data, and dependencies flow today.
- What should stay — sound choices and conventions worth preserving.
- What should change — concrete problems supported by repository evidence.
- Recommended target — the smallest architecture that resolves those problems.
- Update path — ordered, incremental steps with compatibility, migration, testing, deployment, and rollback notes.
Do not rewrite the entire backend, introduce a new framework, split into microservices, or impose a fashionable architecture unless evidence and the user's goal justify it. If implementation was requested, provide the assessment concisely and then follow the update path.
Workflow
- Map entry points, request/message/job flows, state changes, dependencies, and external contracts.
- Identify ownership, coupling, cohesion, duplication, cycles, misplaced responsibilities, scaling limits, and operational gaps.
- Select architecture based on real constraints: team size, domain complexity, traffic, consistency, latency, security, deployment, and expected change.
- Choose the smallest change that satisfies the request. Consider the existing style, modular monoliths, layered/MVC, feature modules, hexagonal/ports-and-adapters, event-driven systems, serverless, or services only where appropriate.
- Separate transport, business rules, data access, validation, and serialization to the degree supported by the stack and problem; avoid ceremonial layers with no value.
- Implement incrementally and preserve public APIs, messages, data, and deployment behavior unless a breaking change is approved.
- Add or update migration, compatibility, and rollback handling when contracts or persisted data change.
- Run the ecosystem's relevant formatter, linter/static analysis, compiler/type checker, unit/integration tests, and build.
- Report the final structure, decisions, verification, migration status, and remaining risks.
Guardrails
- Centralize configuration and validate required environment variables at startup.
- Keep secrets out of source, logs, and responses.
- Validate at system boundaries and derive identity or authorization from verified server context.
- Keep database and integration details behind clear boundaries.
- Avoid generic shared modules until code is genuinely reused.
- Add abstractions only when they reduce current complexity or support a concrete extension.
- Keep naming, imports, file extensions, framework patterns, toolchain, and runtime compatibility consistent with the repository.
- Prefer a modular monolith for many new products unless independent deployment or scaling boundaries are already justified.
- Treat distributed systems, queues, caches, and microservices as operational commitments, not default folder-organization tools.
Detailed guidance
Read [references/architecture-guide.md](references/architecture-guide.md) when the task needs folder templates, framework-specific examples, API and database rules, authentication or payment structure, review checklists, or a full architecture recommendation. Search that file by its headings and load only the relevant sections for the current task.
Output
Lead with whether an existing backend was found. For existing systems, summarize the current structure and safe update path. For new systems, explain the chosen architecture and why it fits. Distinguish observed problems from optional improvements. For implementation, name changed files, compatibility or migration work, and verification performed.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: furqanistic
- Source: furqanistic/aura-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.