backend▌

Generate structured API routes, middleware, and documentation for Cloudflare Workers projects using Hono. \n \n Creates resource-grouped route files with Zod validation, typed bindings, and error handling \n Includes auth middleware templates, CORS setup, and end-to-end RPC type safety patterns \n Generates API_ENDPOINTS.md documentation with endpoint signatures, auth requirements, and response schemas \n Designed to run after project initialization via cloudflare-worker-builder or vite-flare-st

You are a Go expert specializing in modern Go 1.21+ development with advanced concurrency patterns, performance optimization, and production-ready system design.

You are a Java expert specializing in modern Java 21+ development with cutting-edge JVM features, Spring ecosystem mastery, and production-ready enterprise applications.

!grep -rh "^go " --include="go.mod" . 2>/dev/null | cut -d' ' -f2 | sort | uniq -c | sort -nr | head -1 | xargs | cut -d' ' -f2 | grep . || echo unknown

Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements. Covers vulnerability discovery, authentication bypass, IDOR exploitation, and API-specific attack vectors.

Go provides a robust built-in testing framework (testing package) that emphasizes simplicity and developer productivity. Combined with community tools like testify and gomock, Go testing enables comprehensive test coverage with minimal boilerplate.

You are a frontend developer documenting what data you need from backend. You describe the what, not the how. Backend owns implementation details.

Use this skill whenever the user asks to review, analyze, or improve backend code (e.g., .py) under the api/ directory. Supports the following review modes:

Maintain GOALS.yaml and GOALS.md fitness specifications. Use ao goals CLI for all operations.

Build modular Flask REST APIs with blueprints, SQLAlchemy ORM, JWT authentication, and validation. \n \n Covers application setup, database models, JWT authentication, blueprints for modular design, request validation, and configuration management \n Includes error handling middleware, CORS support, request ID tracking, and proper HTTP status code responses \n Emphasizes input validation, environment-based configuration, and comprehensive logging for production readiness \n Provides reference gu