hs:backend-development

Build backend APIs, authentication, databases, and microservices with Node.js, Python, and Go.

Updated Jul 19, 2026
One-click install
npx skills add https://github.com/Dozyboy/VSF --skill hs-backend-development-dozyboy
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hs:backend-development
Source: https://github.com/Dozyboy/VSF/tree/main/Day2_VSF/Demo1/harness/plugins/hs/disabled-skills/backend-development
Command: npx skills add https://github.com/Dozyboy/VSF --skill hs-backend-development-dozyboy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Designing and shipping production backends requires juggling API design, authentication, database optimization, security hardening, testing, and deployment, and this Skill consolidates those decisions and patterns into one guided workflow. ## Core Features & Use Cases - API Design Guidance: Covers REST, GraphQL, and gRPC patterns including pagination, versioning, error formats, and a decision matrix for choosing between them. - Security & Authentication: Implements OAuth 2.1 with PKCE, JWT best practices, RBAC, MFA/WebAuthn, Argon2id password hashing, and OWASP Top 10 mitigations. - Architecture & Operations: Provides microservices patterns (saga, CQRS, circuit breaker), caching and scaling strategies, testing pyramids, Docker/Kubernetes deployment, and observability with Prometheus, OpenTelemetry, and structured logging. - Use Case: When building a new NestJS order service, use this Skill to design the REST endpoints, add JWT auth with RBAC, set up PostgreSQL indexes and Redis caching, write integration tests, and produce a Kubernetes deployment manifest with health checks. ## Quick Start Use the backend-development skill to design a FastAPI REST service with OAuth 2.1 authentication, PostgreSQL storage, and a Docker deployment setup.

Frequently Asked Questions about hs:backend-development

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I choose between REST, GraphQL, and gRPC for my API?▼

Choose REST for public CRUD APIs with HTTP caching, GraphQL when clients need flexible data fetching, and gRPC for internal microservices where performance matters. gRPC runs 7-10x faster than REST but requires gRPC-Web for browsers.

How to implement OAuth 2.1 authentication with PKCE?▼

Generate a code verifier and SHA-256 challenge, redirect to the authorization endpoint with the challenge, then exchange the returned code plus the verifier for tokens. OAuth 2.1 mandates PKCE for all clients and deprecates the implicit grant flow.

What password hashing algorithm should I use in 2025?▼

Use Argon2id, the winner of the Password Hashing Competition, which is memory-hard and resistant to GPU/ASIC attacks. Configure it with 64 MB memory cost, 3 iterations, and 4 parallelism threads, replacing older bcrypt setups.

When should I use microservices instead of a monolith?▼

Use microservices for large teams with clear domain boundaries needing independent deployment and scaling. Start with a monolith for MVPs and small teams, since microservices add distributed-system complexity like eventual consistency and operational overhead.

Why is my Node.js backend running out of memory?▼

Common causes are event listeners never removed, unbounded global caches, and unreleased database connections. Take heap snapshots with writeHeapSnapshot, compare them in Chrome DevTools, and use LRU caches with size limits to prevent unbounded growth.

How do I prevent N+1 queries in GraphQL resolvers?▼

Use DataLoader to batch and cache per-request database calls in field resolvers. It collects all parent IDs in a tick and issues one query, eliminating the per-record query pattern that causes N+1 problems.