How do I install the Backend Mindset skill?

Run npx skillmds@latest add dangquangse/backend-mindset in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Backend Mindset safe to use?

SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: makes network calls, reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Backend Mindset?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Backend Mindset free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under MIT.

Who published Backend Mindset?

DangQuangSE (@dangquangse) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Backend Mindset by dangquangse — Agent Skill

Name: Backend Mindset
Rating: 4.2 (5 reviews)
Author: DangQuangSE

File contents

Backend Development Skill

References

File	Covers
`.codex/skills/backend-mindset/references/api-design.md`	REST, GraphQL, gRPC — URL rules, status codes, protocol selection
`.codex/skills/backend-mindset/references/authentication.md`	OAuth 2.1, JWT, RBAC, MFA, session management
`.codex/skills/backend-mindset/references/security.md`	OWASP Top 10 (2025), rate limiting, headers, secrets
`.codex/skills/backend-mindset/references/performance.md`	Indexing, caching patterns, load balancing, async processing
`.codex/skills/backend-mindset/references/architecture.md`	Microservices patterns, event-driven, CQRS, scalability
`.codex/skills/backend-mindset/references/testing.md`	TDD, test pyramid, contract testing, migration tests
`.codex/skills/backend-mindset/references/code-quality.md`	SOLID, design patterns, refactoring signals

Quick Decision Guide

Need	Choose
Public / browser clients	REST or GraphQL
Internal high-throughput	gRPC
Flexible data fetching	GraphQL
Streaming	gRPC (bidirectional) or SSE
Single team, unclear domain	Monolith
Multiple autonomous teams	Microservices
Audit trail required	Event Sourcing
Read/write load imbalance	CQRS
Task >200ms off request path	Async queue
Session across instances	Redis (never in-process)

Defaults

Every non-public endpoint requires explicit auth declaration — no implicit defaults
Input validation at every system boundary (API handler, event consumer, file parser)
Parameterized queries everywhere — never string-interpolate user input
Rate limiting on auth endpoints, public API, and file upload (see security.md for thresholds)
Integration tests hit real infrastructure (Testcontainers) — in-memory substitutes hide real bugs
TDD: write the failing test before any implementation
Services return result envelopes — never throw for expected failures (404, 400, 409)

---name: backend-mindsetdescription: Guides backend development across API design, authentication, databases, performance, security, scalability, and testing, with quick decision guides and defaults for production-ready systems.license: MIT---# Backend Development Skill## References| File | Covers ||------|--------|| `.codex/skills/backend-mindset/references/api-design.md` | REST, GraphQL, gRPC — URL rules, status codes, protocol selection || `.codex/skills/backend-mindset/references/authentication.md` | OAuth 2.1, JWT, RBAC, MFA, session management || `.codex/skills/backend-mindset/references/security.md` | OWASP Top 10 (2025), rate limiting, headers, secrets || `.codex/skills/backend-mindset/references/performance.md` | Indexing, caching patterns, load balancing, async processing || `.codex/skills/backend-mindset/references/architecture.md` | Microservices patterns, event-driven, CQRS, scalability || `.codex/skills/backend-mindset/references/testing.md` | TDD, test pyramid, contract testing, migration tests || `.codex/skills/backend-mindset/references/code-quality.md` | SOLID, design patterns, refactoring signals |## Quick Decision Guide| Need | Choose ||------|--------|| Public / browser clients | REST or GraphQL || Internal high-throughput | gRPC || Flexible data fetching | GraphQL || Streaming | gRPC (bidirectional) or SSE || Single team, unclear domain | Monolith || Multiple autonomous teams | Microservices || Audit trail required | Event Sourcing || Read/write load imbalance | CQRS || Task >200ms off request path | Async queue || Session across instances | Redis (never in-process) |## Defaults- Every non-public endpoint requires explicit auth declaration — no implicit defaults- Input validation at every system boundary (API handler, event consumer, file parser)- Parameterized queries everywhere — never string-interpolate user input- Rate limiting on auth endpoints, public API, and file upload (see security.md for thresholds)- Integration tests hit real infrastructure (Testcontainers) — in-memory substitutes hide real bugs- TDD: write the failing test before any implementation- Services return result envelopes — never throw for expected failures (404, 400, 409)

Frequently asked questions

Backend Mindset