AgentStack
SKILL verified MIT Self-run

Backend Development

skill-martian56-claude-engineer-backend-development · by martian56

Use when building or structuring a Python backend on FastAPI + SQLAlchemy 2.0 (async) + Alembic + Pydantic v2. Provides the opinionated project layout, the standard kit (auth, async jobs, caching, storage, observability), and best practices.

No reviews yet
0 installs
2 views
0.0% view→install

Install

$ agentstack add skill-martian56-claude-engineer-backend-development

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access Used
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Backend Development? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Backend Development

Announce at start: "I'm using claude-engineer:backend-development to build the FastAPI backend."

The stack (defaults)

Python 3.12+ · FastAPI · SQLAlchemy 2.0 async (asyncpg) · Alembic · Pydantic v2 + pydantic-settings · uv (deps/venv) · ruff (lint+format) · mypy (types) · pytest (tests). Domain-modular layout: src//{router,schemas,models,service,dependencies}.py.

The standard kit (scaffold these by default)

  • Auth & security - OAuth2 password flow, JWT access + refresh, password hashing (argon2/bcrypt), rate limiting, CORS, security headers.
  • Async jobs & scheduling - a task queue + scheduled jobs over Redis (see the reference for the recommended library and why).
  • Caching & object storage - Redis cache patterns + an S3/MinIO storage abstraction.
  • Observability - structured logging, Sentry, OpenTelemetry traces, /health + /ready endpoints.

Non-negotiables

  1. Async all the way - async engine + session-per-request dependency; no sync DB calls in request paths.
  2. Migrations are real - every schema change ships an Alembic migration (async-compatible); never auto-create in prod paths.
  3. Typed & validated - Pydantic v2 request/response models; mypy clean (hard gate).
  4. Tested - pytest + pytest-asyncio + httpx AsyncClient against a real test DB; meet the coverage threshold.
  5. Config via pydantic-settings - no secrets in code; env-driven; documented required vars.
  6. Services in Docker, app native - connect to Postgres/Redis/MinIO/Mailpit on localhost (claude-engineer:docker-dev-environment); run uvicorn natively.

Full detail: read references/fastapi-stack.md (exact project structure, SQLAlchemy 2.0 patterns, async Alembic setup, the job-queue recommendation, auth, observability, the blessed-packages list, pyproject.toml) on demand.

Red flags - STOP

  • A sync DB driver or blocking I/O in an async endpoint.
  • A model change without a matching Alembic migration.
  • Secrets/config literals in source instead of pydantic-settings + env.
  • Shipping an endpoint with no test.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.