backend-dev-guidelines

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
12
Flagged
12
Chunks
19
Flagged Files (12)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: backend-dev-guidelines description: Comprehensive backend development guide for Node.js/Express/TypeScript microservices.

resources/architecture-overview.mdHIGH
78.3%

Malicious tool definition detected

Tool: resources/architecture-overview.md [1/2] Description: # Architecture Overview - Backend Services Complete guide to the layered architecture pattern used in backend microservices.

Tool: resources/architecture-overview.md [2/2]

resources/async-and-errors.mdHIGH
78.3%

Malicious tool definition detected

Tool: resources/async-and-errors.md Description: # Async Patterns and Error Handling Complete guide to async/await patterns and custom error handling.

resources/complete-examples.mdHIGH
78.3%

Malicious tool definition detected

Tool: resources/complete-examples.md [1/2] Description: # Complete Examples - Full Working Code Real-world examples showing complete implementation patterns.

Tool: resources/complete-examples.md [2/2] Description: PostService(); } async createPost(req: Request, res: Response): Promise<void> { try { const validated = createPostSchema.parse({ ...req.body, }); const result = await this.postService.createPost( validated, res.locals.userId ); this.handleSuccess(res, result, 'Post created successfully'); } catch (error) { this.handleError(error, res, 'createPost'); } } } ``` **3.

resources/configuration.mdHIGH
78.3%

Malicious tool definition detected

Tool: resources/configuration.md Description: # Configuration Management - UnifiedConfig Pattern Complete guide to managing configuration in backend microservices.

resources/database-patterns.mdHIGH
78.3%

Malicious tool definition detected

Tool: resources/database-patterns.md Description: # Database Patterns - Prisma Best Practices Complete guide to database access patterns using Prisma in backend microservices.

resources/middleware-guide.mdHIGH
78.3%

Malicious tool definition detected

Tool: resources/middleware-guide.md Description: # Middleware Guide - Express Middleware Patterns Complete guide to creating and using middleware in backend microservices.

resources/routing-and-controllers.mdHIGH
78.3%

Malicious tool definition detected

Tool: resources/routing-and-controllers.md [1/3] Description: # Routing and Controllers - Best Practices Complete guide to clean route definitions and controller patterns.

Tool: resources/routing-and-controllers.md [2/3] Description: p.id); const canComplete = await permissionService.canCompleteStep(userId, stepInstanceId); if (!canComplete) { return res.status(403).json({ error: 'No permission' }); } // ❌ Workflow logic in route const { createWorkflowEngine, CompleteStepCommand } = require('../workflow/core/WorkflowEngineV3'); const engine = await createWorkflowEngine(); const command = new CompleteStepCommand( stepInstanceId, userId, responses, additionalContext

Tool: resources/routing-and-controllers.md [3/3]

resources/sentry-and-monitoring.mdHIGH
78.3%

Malicious tool definition detected

Tool: resources/sentry-and-monitoring.md Description: # Sentry Integration and Monitoring Complete guide to error tracking and performance monitoring with Sentry v8.

resources/services-and-repositories.mdHIGH
78.3%

Malicious tool definition detected

Tool: resources/services-and-repositories.md [1/3] Description: # Services and Repositories - Business Logic Layer Complete guide to organizing business logic with services and data access with repositories.

Tool: resources/services-and-repositories.md [2/3] Description: of data operations: ``` Service: "Get me all active users sorted by name" Repository: "Here's the Prisma query that does that" ``` **Repositories are responsible for:** - ✅ All Prisma operations - ✅ Query construction - ✅ Query optimization (select, include) - ✅ Database error handling - ✅ Caching database results **Repositories should NOT:** - ❌ Contain business logic - ❌ Know about HTTP - ❌ Make decisions (that's service layer) ##

Tool: resources/services-and-repositories.md [3/3]

resources/testing-guide.mdHIGH
78.3%

Malicious tool definition detected

Tool: resources/testing-guide.md Description: # Testing Guide - Backend Testing Strategies Complete guide to testing backend services with Jest and best practices.

resources/validation-patterns.mdHIGH
78.3%

Malicious tool definition detected

Tool: resources/validation-patterns.md [1/2] Description: # Validation Patterns - Input Validation with Zod Complete guide to input validation using Zod schemas for type-safe validation.

Tool: resources/validation-patterns.md [2/2] Description: 400); } this.handleError(error, res, 'updateUser'); } } } ``` **Pros:** - Clean separation - Reusable schemas - Easy to test - Type-safe DTOs **Cons:** - More files to manage --- ## DTO Pattern ### Type Inference from Schemas ```typescript import { z } from 'zod'; // Define schema const createUserSchema = z.object({ email: z.string().email(), name: z.string(), age: z.number().int().positive(), }); // Infer TypeScript type from schema type

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
12
Files Flagged
12
Chunks Analyzed
19
Analyzed
Feb 21, 2026, 07:07 PM
Security Audit — runlayer — backend-dev-guidelines