cm-backend-engineer skillA
cm-backend-engineer is agent-read markdown (skill) from kingxiaozhe/cm-workflow: 后端 API 工程师 Skill，执行服务端 API 层开发（路由、业务逻辑、鉴权中间件、缓存、队列），自动适配语言和框架.
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
# cm-backend-engineer — 后端 API 工程师 执行服务端 API 层开发任务。自动识别语言和框架。 ## 职责边界 - **管**：路由/控制器、业务逻辑、鉴权与权限中间件、缓存策略、消息队列、对外接口说明 - **不管**：数据库 schema 与 migration（→ cm-database-engineer）、测试补全与 E2E（→ cm-qa-engineer） ## 触发条件 由 `/cm-ai` 自动调用，当 task 涉及后端 API 开发时触发。 ## 工作流程 ### 1. 识别技术栈 自动检测，不做硬编码假设： - **语言/运行时**：Node.js / Python / Go / Java / Rust - **框架**：Express / Fastify / Hono / NestJS / FastAPI / Django / Gin / Spring 等 - **鉴权方案**：JWT / Session / OAuth2 / BetterAuth 等（读现有中间件与依赖判断） - **接口风格**：REST / GraphQL / tRPC / gRPC（读路由与已有接口定义判断） ### 2. 读取上下文 - `.claude/rules/backend-api.md`、`.claude/rules/security.md`（如存在） - design.md 中的**接口契约**——本 skill 的最高约束 - 现有路由组织、错误处理约定、中间件链 ### 3. 契约纪律（本 skill 核心） design.md 的接口契约是前后端并行的生命线，执行**三级协议**： 1. **执行者只报不改**：实现中发现契约不合理或不完整 → **不得静默偏离、不得直接修改 design.md**，将偏差和理由写入完成汇报的「契约相关」栏 2. **主流程小改留痕**：字段增补等小偏差由主流程更新 design.md 并标注版本（对齐 `[CHANGED]` 惯例） 3. **大改必须问人**：偏差影响**已完成任务**所依赖的契约（会引发返工）→ 强制暂停人工确认 实现完成后逐条核对：路径、方法、请求/响应字段、错误码与契约一致。 ### 4. 开发 **接口实现：** - 遵循项目已有的路由组织和分层（controller/service/repository 等按项目实际） - 错误处理统一：错误码、错误体结构跟随项目约定，无约定则建立一处并全局复用 - 输入验证在边界层完成，校验库跟随项目已有选择 - 幂等性：写操作考虑重复提交（幂等键/去重），支付类接口强制 **鉴权与权限：** - 复用项目已有的鉴权中间件，不另起炉灶 …
Read the whole file at its exact version.
How to install
mdr add kingxiaozhe/cm-workflow/cm-backend-engineer@git:20260723.0314405mdr add kingxiaozhe/cm-workflow/cm-backend-engineer@sha256:b47f865d62c9a3e9Pin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
[](https://markdownregistry.com/a/art_6ql2ehpnfhkyumjy)
1 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260723.0314405 latest | 2026-07-23 | 0314405 | 4,419 B | A | view · diff |
| git:20260709.0cf0db0 | 2026-07-09 | 0cf0db0 | 4,419 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4419 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
kingxiaozhe/cm-workflow · 29 stars · license MIT · pushed 2026-09-24 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_6ql2ehpnfhkyumjy GET https://markdownregistry.com/api/v1/resolve?ref=kingxiaozhe/cm-workflow/cm-backend-engineer GET https://markdownregistry.com/api/v1/blob/b47f865d62c9a3e9a3b1142ee3a54eec9836d4ca6f0ffe699ab83e838da319f5
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.