Software_development_department team-backend
install
source · Clone the upstream repo
git clone https://github.com/tranhieutt/software_development_department
Claude Code · Install into ~/.claude/skills/
T=$(mktemp -d) && git clone --depth=1 https://github.com/tranhieutt/software_development_department "$T" && mkdir -p ~/.claude/skills && cp -r "$T/.claude/skills/team-backend" ~/.claude/skills/tranhieutt-software-development-department-team-backend && rm -rf "$T"
manifest:
.claude/skills/team-backend/SKILL.mdsource content
When this skill is invoked, orchestrate the backend team through a structured delivery pipeline.
Decision Points: At each phase, use
AskUserQuestion to get user approval before proceeding.
Team Composition
- technical-director — Architecture review and approval
- backend-developer — API and service implementation
- data-engineer — Schema design and migrations
- security-engineer — Security review
Pipeline
Phase 1: Architecture Design
Delegate to technical-director:
- Review the system requirements
- Propose architecture: service boundaries, data flows, technology choices
- Identify risks and cross-cutting concerns
- Output: Architecture proposal for approval
Phase 2: Schema Design
Delegate to data-engineer:
- Design database schema based on approved architecture
- Write migration scripts (up and down)
- Define indexes and constraints
- Output: Schema design doc + migration files for review
Phase 3: API Contract Design
Delegate to backend-developer:
- Define REST/GraphQL endpoint contracts
- Specify request/response schemas and error codes
- Define authentication requirements per endpoint
- Output: API contract for frontend team to build against
Phase 4: Implementation
Delegate to backend-developer:
- Implement approved endpoints
- Apply approved schema migrations
- Write unit and integration tests
- Output: Implemented and tested backend
Phase 5: Security Review (parallel with implementation where possible)
Delegate to security-engineer:
- Review auth and authorization logic
- Check for injection vulnerabilities, insecure data exposure
- Validate input sanitization
- Output: Security review report
Phase 6: Integration
- Address security findings
- Confirm API is ready for frontend integration
- Run
and/db-review
checks/api-design
Output
Summary covering: architecture decision, schema status, API contract, test coverage, and security review result.