by globalmpc
Skills that stop AI agents from writing backend code that passes the demo and breaks in production. Critical mistakes: 25/150 runs without, 2/150 with. Claude Code, Codex, Cursor.
Available after the catalog security scan passes.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
The deep catalog scan for this skill is still queued. Run an instant dependency check now instead.
# Add to your Claude Code skills
git clone https://github.com/globalmpc/backendskillsGuides for using ai agents skills like backendskills.
See how backendskills compares with popular alternatives.
Agent skills that make Claude Code, Codex and Cursor write backend code like a senior engineer: safe on auth, data, money and schema changes by default.

We gave agents 15 backend tasks with and without the skills, then ran a hidden check the agent never sees: 20 buyers at once for 5 items in stock, a user reading someone else's order, the old app version running against the new schema mid-deploy.
Critical mistakes: 25/150 runs without the skills, 2/150 with them. (Sonnet 5.5 and Haiku 5.5, 5 runs per task.)
| Task | Haiku 5.5 | Sonnet 5.5 |
|---|---|---|
checkout |
1/5 → 0/5 | 2/5 → 0/5 |
get-order |
0/5 → 0/5 | 0/5 → 0/5 |
login-rate-limit |
5/5 → 0/5 | 5/5 → 0/5 |
orders-check-constraint |
0/5 → 0/5 | 1/5 → 0/5 |
orders-index |
0/5 → 0/5 | 0/5 → 0/5 |
orders-pagination |
0/5 → 0/5 | 0/5 → 0/5 |
orders-with-items |
0/5 → 0/5 | 0/5 → 0/5 |
payment-webhook |
1/5 → 2/5 | 0/5 → 0/5 |
product-discount |
0/5 → 0/5 | 0/5 → 0/5 |
product-reviews |
0/5 → 0/5 | 0/5 → 0/5 |
refund |
0/5 → 0/5 | 0/5 → 0/5 |
rename-column |
5/5 → 0/5 | 5/5 → 0/5 |
transfer |
0/5 → 0/5 | 0/5 → 0/5 |
update-profile |
0/5 → 0/5 | 0/5 → 0/5 |
wallet-adjustments |
0/5 → 0/5 | 0/5 → 0/5 |
| All | 12/75 → 2/75 | 13/75 → 0/75 |
Runs with a critical mistake, without → with the skills. Most of the gap is two tasks: login-rate-limit
and rename-column account for 20 of the 25, and 10 of the 15 tasks had no critical mistake either way.
Not fixed yet: Haiku on out-of-order webhook events.
bench/skills-overlay). The
whole with-skills arm uses that version. As shipped, those lines say "not set".usage_limit_reached):
20 Sonnet with-skills runs on rename-column, 1 on orders-index, 4 Opus. Each run's reason is its
error_reason in runs.jsonl. The 21 Opus runs there are a partial run, not part of the results.
Every raw run, the tasks and how to rerun it are in bench/.npx skills add globalmpc/backendskills
Codex and other AGENTS.md agents: append dist/AGENTS.md. Cursor: copy
dist/cursor/ into .cursor/rules/.
| Skill | What the agent does by default |
|---|---|
api-endpoint |
Scopes every query to the caller, turns bad input into a 4xx, rate-limits login and costly routes |
data-integrity |
Locks or conditional updates for read-then-write, UNIQUE constraints, idempotency keys on anything that charges or sends |
db-migration |
Expand then contract, concurrent indexes, lock timeouts, batched backfills, down migrations |
Each skill ends with a Make it yours section for your team's choices (error format, API docs). Left as "not set", the agent follows what your repo already does.
Agent still made a mistake with the skills loaded? Open an issue with the prompt and the diff.
Edit skills in skills/, then node scripts/build-dist.mjs.
backendskills is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by globalmpc. Skills that stop AI agents from writing backend code that passes the demo and breaks in production. Critical mistakes: 25/150 runs without, 2/150 with. Claude Code, Codex, Cursor. It has 51 GitHub stars.
backendskills's catalog security scan is still queued. You can run an instant dependency and prompt-injection check now with the "Scan for vulnerabilities" button above.
Clone the repository with "git clone https://github.com/globalmpc/backendskills" and add it to your Claude Code skills directory (see the Installation section above).
backendskills is primarily written in TypeScript. It is open-source under globalmpc on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh backendskills against similar tools.
No comments yet. Be the first to share your thoughts!