指导后端审计。在实施或审查后端应用的生产就绪性、安全性、可靠性、测试、发布配置及优先级发现问题时使用。
该技能专为后端开发与运维设计，提供全面的生产环境审计指南。它涵盖API设计、认证授权、运行时验证、数据完整性、数据库迁移、安全性、可靠性、可观测性、后台任务、webhook行为及各类测试覆盖率（单元/集成/契约/端到端）。此外，还包括对GitHub Actions CI/CD、部署与回滚策略的审查。技能强调对仓库的全面扫描，识别如TODO、FIXME、硬编码凭证、调试端点、不受限CORS、禁用的认证、测试密钥、本地主机生产配置、缺失的超时及无限制重试等潜在风险。所有问题按严重性分为关键、高、中、低四个等级，并明确指出在关键问题未解决前不得将服务标记为生产就绪。此技能适用于Claude Code等AI代理，帮助开发者系统化地进行生产环境评估，确保后端应用的安全性、稳定性和可靠性。
npx skills add https://github.com/AlanWYChen/agent-skills/tree/HEAD/production-engineering-skills/backend/auditInstalled? Explore more 编程与开发 skills: steipete/bluebubbles, steipete/eightctl, steipete/blucli · View all 6 →
审计内容：
仓库扫描项：
评级分类：
在严重问题未解决前，不得将服务标记为“投产就绪”。
This repo contains 3 individual skills — each has its own dedicated page.
Guide backend authentication. Use when implementing or reviewing sign-in, identity verification, session or token lifecycle, account recovery, and authorization boundaries in backend applications.
Guide production backend development. Use for APIs, services, workers, queues, schedulers, and data systems; select the relevant backend guidance.
Guide production application development across web, mobile, and backend systems. Use when implementing or auditing production workflows; route to the applicable domain and supporting guidance.
Send and manage iMessages via BlueBubbles, including attachments, tapbacks, edits, replies, and groups.
Control Eight Sleep pods (status, temperature, alarms, schedules).
BluOS CLI (blu) for discovery, playback, grouping, and volume.
Create, search, and manage Bear notes via grizzly CLI.
Capture frames or clips from RTSP/ONVIF cameras.
Search GIF providers with CLI/TUI, download results, and extract stills/sheets.