Server-side architecture and security — API design, error handling, validation, logging. Use when building APIs, server logic, or reviewing backend security.
63
Quality
44%
Does it follow best practices?
Impact
99%
1.06xAverage score across 3 eval scenarios
Optimize this skill with Tessl
npx tessl skill review --optimize ./skills/platform/platform-backend/SKILL.mdRequest lifecycle and multi-tenant authorization
Auth before validation
83%
100%
Authorization after auth
100%
100%
Tenant filter in query
100%
100%
Guard clauses at top
100%
100%
Auth vs authz separated
100%
100%
Output excludes internals
100%
100%
Explicit field selection
100%
100%
Output schema defined
0%
100%
DESIGN.md lifecycle explanation
75%
100%
No silent error swallow
100%
100%
Without context: $0.6857 · 3m 1s · 33 turns · 38 in / 10,830 out tokens
With context: $1.6112 · 6m 31s · 59 turns · 554 in / 18,717 out tokens
Error handling, HTTP codes, and information security
Domain-specific error classes
100%
100%
401 for unauthenticated
100%
100%
403 vs 404 distinction
100%
100%
400 for business rule failures
62%
75%
Generic client error message
100%
100%
Server-side error logging
80%
100%
No sensitive data in logs
100%
100%
Structured log objects
100%
100%
ERROR_DECISIONS.md explains status codes
100%
100%
No silent error swallow
83%
100%
Without context: $0.4423 · 1m 50s · 23 turns · 26 in / 6,983 out tokens
With context: $0.7637 · 2m 21s · 37 turns · 539 in / 8,680 out tokens
Strict input validation and safe output schemas
Email format validation
100%
100%
String length constraints
100%
100%
Enum for fixed-value fields
100%
100%
No z.any() or z.unknown()
100%
100%
Role not in input schema
100%
100%
Output schema defined
100%
100%
Sensitive fields excluded from output
100%
100%
Explicit field construction
100%
100%
SCHEMA_NOTES explains exclusions
100%
100%
Date of birth validated
100%
100%
Input validated before use
100%
100%
Without context: $0.7006 · 3m 42s · 32 turns · 38 in / 11,606 out tokens
With context: $0.6932 · 2m 31s · 31 turns · 3,019 in / 9,068 out tokens
Table of Contents
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.