# Skills for Backend and APIs Skills for Backend and APIs: what each one does, an install command and example prompts. 2279 cards · page 16 of 57 - HTML: https://affpapa.org/en/nevibecode/skills/topic/backend?page=16 - Instructions for agents: https://affpapa.org/en/nevibecode/agents.md - [api-authorization-and-bola](https://affpapa.org/en/nevibecode/skills/api-authorization-and-bola.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3700 installs — A playbook for testing API authorization: reaching other users' objects, calling functions your role should not have, and writing hidden fields. - [websocket-security](https://affpapa.org/en/nevibecode/skills/websocket-security.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3800 installs — Helps analyze WebSocket security, detect CSWSH vulnerabilities, and review handshake headers. - [payload](https://affpapa.org/en/nevibecode/skills/payload.md) — skill · payloadcms · Claude Code, Codex, Cursor +3 · 6900 installs — Guides Payload CMS development across collections, hooks, and access control. - [neon-auth](https://affpapa.org/en/nevibecode/skills/neon-auth.md) — skill · neondatabase · Claude Code, Codex, Cursor +3 · 20300 installs — Provisions Managed Better Auth in Neon Postgres branches. - [agnes-ai-generation](https://affpapa.org/en/nevibecode/skills/agnes-ai-generation.md) — skill · Yacey · Claude Code, Codex, Cursor +3 · 2400 installs — Calls Agnes and Sapiens AI generation APIs for text, images, and video directly from your agent. - [prototype-pollution](https://affpapa.org/en/nevibecode/skills/prototype-pollution.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — Tests JavaScript stacks for prototype pollution, from unsafe object merges to polluted-property reads. - [expression-language-injection](https://affpapa.org/en/nevibecode/skills/expression-language-injection.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — An Expression Language injection attack playbook for Java frameworks. - [http-parameter-pollution](https://affpapa.org/en/nevibecode/skills/http-parameter-pollution.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — Guides agents through HTTP Parameter Pollution tests when WAFs, proxies, and backends parse duplicate parameters differently. - [graphql-and-hidden-parameters](https://affpapa.org/en/nevibecode/skills/graphql-and-hidden-parameters.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A playbook for GraphQL and hidden parameter testing: introspection, batching, undocumented fields and authorization gaps. - [m07-concurrency](https://affpapa.org/en/nevibecode/skills/m07-concurrency.md) — skill · actionbook · Claude Code, Codex, Cursor +3 · 3500 installs — Guides Rust concurrency and async decisions, from Send/Sync errors to locks and channels. - [nosql-injection](https://affpapa.org/en/nevibecode/skills/nosql-injection.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3500 installs — A skill for testing NoSQL injection in MongoDB, CouchDB, and Redis. - [type-juggling](https://affpapa.org/en/nevibecode/skills/type-juggling.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — Helps identify and bypass weak equality checks and magic hashes in PHP code paths. - [testing-api-for-mass-assignment-vulnerability](https://affpapa.org/en/nevibecode/skills/testing-api-for-mass-assignment-vulnerability.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 385 installs — Tests APIs for mass assignment by adding undocumented request fields and checking whether they persist. - [tech-stack-evaluator](https://affpapa.org/en/nevibecode/skills/tech-stack-evaluator.md) — skill · Alireza Rezvani · Claude Code · 904 installs — Evaluates frameworks, libraries, and cloud providers with weighted scoring. - [restore-credentials](https://affpapa.org/en/nevibecode/skills/restore-credentials.md) — skill · Google LLC · Claude Code, Codex, Cursor +3 · 638 installs — This skill guides Android Restore Credentials integration with androidx.credentials for silent sign-in after an app is restored on a new device. - [X MCP guide](https://affpapa.org/en/nevibecode/skills/x-mcp-guide.md) — skill · cursor · Claude Code, Codex, Cursor +3 · 614 installs — This skill guides agents through X connections and MCP tools. - [pinme](https://affpapa.org/en/nevibecode/skills/pinme.md) — skill · glitternetwork · Claude Code, Codex, Cursor +3 · 710 installs — Deploys static builds to IPFS and provisions full-stack apps on Cloudflare Workers and D1 databases. - [m11-ecosystem](https://affpapa.org/en/nevibecode/skills/m11-ecosystem.md) — skill · actionbook · Claude Code, Codex, Cursor +3 · 3300 installs — Guides the AI through Rust crate selection, Cargo.toml configuration, and FFI bindings. - [m13-domain-error](https://affpapa.org/en/nevibecode/skills/m13-domain-error.md) — skill · actionbook · Claude Code, Codex, Cursor +3 · 3300 installs — This skill helps design domain error types, recovery rules, and debugging context. - [m09-domain](https://affpapa.org/en/nevibecode/skills/m09-domain.md) — skill · actionbook · Claude Code, Codex, Cursor +3 · 3300 installs — Domain-driven design guide for structuring Rust code. - [ghost-bits-cast-attack](https://affpapa.org/en/nevibecode/skills/ghost-bits-cast-attack.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3300 installs — A Ghost Bits playbook: how a 16-bit Java char narrows to an 8-bit byte and slips past WAFs in front of SQLi, deserialization and webshell uploads. - [perf-profiler](https://affpapa.org/en/nevibecode/skills/perf-profiler.md) — skill · composio-community · Claude Code, Codex, Cursor +3 · 1600 installs — Runs profilers against CPU and memory hot paths, captures flame graphs, and records file and line evidence. - [perf-benchmarker](https://affpapa.org/en/nevibecode/skills/perf-benchmarker.md) — skill · composio-community · Claude Code, Codex, Cursor +3 · 1600 installs — Runs benchmarks sequentially under strict duration rules to catch performance regressions and set baseline metrics. - [performing-security-headers-audit](https://affpapa.org/en/nevibecode/skills/performing-security-headers-audit.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 359 installs — Audits HTTP security headers including CSP, HSTS, and cookie flags. - [effect](https://affpapa.org/en/nevibecode/skills/effect.md) — skill · kitlangton · Claude Code, Codex, Cursor +3 · 2500 installs — A guide for building TypeScript applications with Effect v4, covering services, schemas, configuration, HTTP clients, streams, and tests. - [provider-actions](https://affpapa.org/en/nevibecode/skills/provider-actions.md) — skill · hashicorp · Claude Code, Codex, Cursor +3 · 3900 installs — Guides implementation of Terraform Actions with the Plugin Framework for operations run around resource create, update, and destroy events. - [implementing-api-rate-limiting-and-throttling](https://affpapa.org/en/nevibecode/skills/implementing-api-rate-limiting-and-throttling.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 348 installs — This skill configures Redis-backed sliding window and token bucket rate limiters to protect API endpoints against brute force attacks. - [domain-web](https://affpapa.org/en/nevibecode/skills/domain-web.md) — skill · actionbook · Claude Code, Codex, Cursor +3 · 3100 installs — A Rust web-service skill covering async handlers, shared state, errors, extractors, and middleware. - [testing-for-business-logic-vulnerabilities](https://affpapa.org/en/nevibecode/skills/testing-for-business-logic-vulnerabilities.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 333 installs — This skill manually checks web app business logic with Burp Suite. - [stripe-apps](https://affpapa.org/en/nevibecode/skills/stripe-stripe-apps.md) — skill · stripe · Claude Code, Codex, Cursor +3 · 1500 installs — Guides coding agents in building, modifying, and reviewing Stripe Apps, Dashboard extensions, and billing scripts. - [testing-websocket-api-security](https://affpapa.org/en/nevibecode/skills/testing-websocket-api-security.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 328 installs — Audits WebSocket API security, checking upgrade handshake authentication, token validation, and CSWSH vulnerabilities. - [api-design-reviewer](https://affpapa.org/en/nevibecode/skills/api-design-reviewer.md) — skill · Alireza Rezvani · Claude Code · 768 installs — Audits REST API designs, spots breaking changes between spec versions, and calculates quality scorecards. - [aws-social-messaging](https://affpapa.org/en/nevibecode/skills/aws-social-messaging.md) — skill · aws · Claude Code, Codex, Cursor +3 · 3000 installs — This skill manages WhatsApp messaging through AWS End User Messaging Social, including templates, media, delivery events, and troubleshooting. - [code-to-prd](https://affpapa.org/en/nevibecode/skills/code-to-prd.md) — skill · Alireza Rezvani · Claude Code · 763 installs — This skill turns a codebase into a PRD covering pages, routes, APIs, and user actions. - [postgres](https://affpapa.org/en/nevibecode/skills/postgres.md) — skill · tigerdata · Claude Code, Codex, Cursor +3 · 1400 installs — A skill for PostgreSQL work: table design, indexing, pgvector, PostGIS, TimescaleDB and migrations. - [convex-expert](https://affpapa.org/en/nevibecode/skills/convex-expert.md) — skill · convex · Claude Code, Codex, Cursor +3 · 36200 installs — A skill for any code under convex/: functions, schemas, indexes, validators. - [convex-migrate](https://affpapa.org/en/nevibecode/skills/convex-migrate.md) — skill · convex · Claude Code, Codex, Cursor +3 · 36100 installs — A skill that walks the agent through schema changes and data backfills on a deployed Convex app using @convex-dev/migrations. - [convex-authz](https://affpapa.org/en/nevibecode/skills/convex-authz.md) — skill · convex · Claude Code, Codex, Cursor +3 · 36100 installs — Audits and hardens Convex backend authorization against four defect patterns. - [convex-auth](https://affpapa.org/en/nevibecode/skills/convex-auth.md) — skill · convex · Claude Code, Codex, Cursor +3 · 36200 installs — This skill adds passkey, OAuth, or password sign-in to a Convex app. - [convex-optimize](https://affpapa.org/en/nevibecode/skills/convex-optimize.md) — skill · convex · Claude Code, Codex, Cursor +3 · 36000 installs — The skill audits an existing Convex app and turns the findings into a plan: security, scale, component upgrades, observability. Next: https://affpapa.org/en/nevibecode/skills/topic/backend.md?page=17 ## Refine [typescript](https://affpapa.org/en/nevibecode/tag/typescript.md) · [api](https://affpapa.org/en/nevibecode/tag/api.md) · [python](https://affpapa.org/en/nevibecode/tag/python.md) · [dotnet](https://affpapa.org/en/nevibecode/tag/dotnet.md) · [java](https://affpapa.org/en/nevibecode/tag/java.md) · [rest-api](https://affpapa.org/en/nevibecode/tag/rest-api.md) · [database](https://affpapa.org/en/nevibecode/tag/database.md) · [node](https://affpapa.org/en/nevibecode/tag/node.md) · [csharp](https://affpapa.org/en/nevibecode/tag/csharp.md) · [react](https://affpapa.org/en/nevibecode/tag/react.md) · [webhooks](https://affpapa.org/en/nevibecode/tag/webhooks.md) · [cli](https://affpapa.org/en/nevibecode/tag/cli.md) ## Narrow this list Parameters: `?platform=`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md