- Home
- Skills
- APIs & Backend
- Senior Web Development
Works with the AI tools you already use
Senior Web Development
Full-stack engineering guidance for building maintainable, secure, and production-ready web applications.
$34.99
Senior Web Development
Example session with this skill installed
Review this Node.js API endpoint for a multi-tenant billing system. It handles invoice generation and needs to be idempotent and secure. We use PostgreSQL and Redis for caching.
- Read your context and instructions
- Compiled the senior web development
- Generated the UI component
I have reviewed the billing endpoint logic. The current implementation lacks explicit idempotency keys and fails to wrap the invoice creation and ledger update in a database transaction, creating a risk of partial failures.
Engineering Review: Billing API
| Severity | Location | Finding | Impact | Fix |
|---|---|---|---|---|
| Blocker | POST /invoices | Missing Database Transaction | Failed ledger updates can occur after successful invoice generation. | Wrap both operations in a BEGIN...COMMIT block. |
| High | Middleware | Missing Idempotency Key | Retried requests will create duplicate charges in the billing system. | Implement Idempotency-Key header check using Redis. |
| Medium | Query Logic | Multi-tenant Data Leak | The query does not strictly scope by org_id in the sub-join. | Add mandatory WHERE tenant_id = $1 to all join clauses. |
| Low | Cache Strategy | Cache Invalidation | Redis is updated before DB commit. | Move cache invalidation to a post-commit hook. |
Implementation Roadmap
- Phase 1: Integrity: Refactor the service layer to use a unit-of-work pattern for PostgreSQL transactions.
- Phase 2: Idempotency: Add a Redis-backed middleware that stores request hashes for 24 hours.
- Phase 3: Validation: Implement Zod schemas to enforce strict
tenant_idpresence in all request payloads.
Next steps
- Implement the suggested database transaction block to prevent data mismatch.
- Add a unique constraint on the
invoicestable for the idempotency key. - Verify the
tenant_idisolation in your integration test suite.
senior-web-development.tsx
TSX · React component
Example file from a real run - the skill writes it into your workspace.
Connects securely to your tools. The creator never sees your data.
What you get
About this skill
The problem
Building web applications often leads to isolated code generation that misses the bigger picture. You end up with brittle architectures, mismatched API contracts, and security vulnerabilities that only surface after deployment.
What it does
- Analyzes full-stack architecture to identify component boundaries and failure domains.
- Designs database schemas with a focus on indexing, integrity, and migration strategies.
- Performs defensive security reviews covering XSS, CSRF, and injection prevention.
- Develops implementation roadmaps that break complex features into testable technical tasks.
- Conducts senior-level code reviews focusing on maintainability and operational reliability.
Why this beats prompting it yourself
General prompts usually ignore cross-layer dependencies like how a frontend state change impacts API rate limits or database transactions. This skill enforces a strict discovery-to-deployment workflow that balances delivery speed with production-grade rigor.
Use cases
- Architecting a modular monolith or microservices system from raw product requirements.
- Identifying performance bottlenecks in slow database queries and API waterfalls.
- Auditing production readiness for CI/CD, observability, and rollback strategies.
- Refactoring legacy codebases to improve cohesion and reduce technical debt.
Known limitations
Does not provide instructions for bypassing security controls or unauthorized access. Requires explicit input for repository structure and production metrics to avoid assumptions.
How to install
Works the same in every agent - Claude, Cursor, Codex, Copilot and 20+ more.
- 1
Download the ZIP
Free skills download straight away. Paid skills unlock right after purchase.
- 2
Unzip into your skills folder
Every agent reads skills from one folder on your machine. Drop the unzipped folder in there.
- 3
Ask your agent to use it
Restart the agent if it was already running. It picks the skill up automatically - no config needed.
Skills folder by agent
Click the path to copy it. Create the folder if it does not exist yet.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
30-day refund
Not a fit? Get your money back
Trust & safety
Security scanned
Verified clean 2 days ago
- Passed all security checks, Safe to install