cm-backend-engineer SKILL.md skillA
cm-backend-engineer from kingxiaozhe/cm-workflow is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add kingxiaozhe/cm-workflow/cm-backend-engineer@git:20260723.0314405Pins git:20260723.0314405 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- kingxiaozhe/cm-workflow
- Path
skills/cm-backend-engineer/SKILL.md- Versions recorded
- 2
- Latest version
- git:20260723.0314405, committed Jul 23, 2026
- First version recorded
- Jul 9, 2026
- Size
- 4,419 bytes
- Repository stars
- 97
- License
- MIT
后端 API 工程师 Skill，执行服务端 API 层开发（路由、业务逻辑、鉴权中间件、缓存、队列），自动适配语言和框架.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# cm-backend-engineer — 后端 API 工程师 执行服务端 API 层开发任务。自动识别语言和框架。 ## 职责边界 - **管**：路由/控制器、业务逻辑、鉴权与权限中间件、缓存策略、消息队列、对外接口说明 - **不管**：数据库 schema 与 migration（→ cm-database-engineer）、测试补全与 E2E（→ cm-qa-engineer） ## 触发条件 由 `/cm-ai` 自动调用，当 task 涉及后端 API 开发时触发。 ## 工作流程 ### 1. 识别技术栈 自动检测，不做硬编码假设： - **语言/运行时**：Node.js / Python / Go / Java / Rust - **框架**：Express / Fastify / Hono / NestJS / FastAPI / Django / Gin / Spring 等 - **鉴权方案**：JWT / Session / OAuth2 / BetterAuth 等（读现有中间件与依赖判断） - **接口风格**：REST / GraphQL / tRPC / gRPC（读路由与已有接口定义判断） ### 2. 读取上下文 - `.claude/rules/backend-api.md`、`.claude/rules/security.md`（如存在） - design.md 中的**接口契约**——本 skill 的最高约束 - 现有路由组织、错误处理约定、中间件链 ### 3. 契约纪律（本 skill 核心） design.md 的接口契约是前后端并行的生命线，执行**三级协议**： 1. **执行者只报不改**：实现中发现契约不合理或不完整 → **不得静默偏离、不得直接修改 design.md**，将偏差和理由写入完成汇报的「契约相关」栏 2. **主流程小改留痕**：字段增补等小偏差由主流程更新 design.md 并标注版本（对齐 `[CHANGED]` 惯例） 3. **大改必须问人**：偏差影响**已完成任务**所依赖的契约（会引发返工）→ 强制暂停人工确认 实现完成后逐条核对：路径、方法、请求/响应字段、错误码与契约一致。 ### 4. 开发 **接口实现：** - 遵循项目已有的路由组织和分层（controller/service/repository 等按项目实际） - 错误处理统一：错误码、错误体结构跟随项目约定，无约定则建立一处并全局复用 - 输入验证在边界层完成，校验库跟随项目已有选择 - 幂等性：写操作考虑重复提交（幂等键/去重），支付类接口强制 **鉴权与权限：** - 复用项目已有的鉴权中间件，不另起炉灶 …
Read the whole file at its exact version.
How to install
mdr add kingxiaozhe/cm-workflow/cm-backend-engineer@sha256:b47f865d62c9a3e9The line at the top of this page pins the label git:20260723.0314405, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_6ql2ehpnfhkyumjy)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, between Jul 9, 2026 and Jul 23, 2026, about one every 14 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260723.0314405 latest | 2026-07-23 | 0314405 | 4,419 B | A | view · diff |
| git:20260709.0cf0db0 | 2026-07-09 | 0cf0db0 | 4,419 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4419 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
kingxiaozhe/cm-workflow · 97 stars · license MIT · pushed 2026-11-03 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_6ql2ehpnfhkyumjy GET https://markdownregistry.com/api/v1/resolve?ref=kingxiaozhe/cm-workflow/cm-backend-engineer GET https://markdownregistry.com/api/v1/blob/b47f865d62c9a3e9a3b1142ee3a54eec9836d4ca6f0ffe699ab83e838da319f5
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.