Backend

当用户要求 AI/Agent 安全评估、蓝军演习、AI 安全审查、提示词注入测试、MCP/Skill/插件/代码包审计、Agent 工具链滥用测试，或需要生成类似渗透测试报告的 Markdown/HTML 时，必须使用本 skill。本 skill 让 Agent 以授权蓝军视角成为 AI 安全专家，面向 AI…

Adding a new feature flag to the Webiny system.

Generating Headless CMS entry content with AI from your own code, by delegating to the AI Power Ups extension instead of calling an LLM directly.

Schema-based permission system for API features.

Authoring a custom Headless CMS bulk action (EntriesBulkAction) that Webiny runs as a background task, plus the Admin-side button that triggers it.

Adding custom GraphQL queries and mutations using GraphQLSchemaFactory.

The universal createImplementation DI pattern and all injectable services.

EventHandler implementation pattern — handle method, event payloads, filtering, DI, domain event definition, publishing events from UseCases, and reacting to…

Full-stack extension skeleton and registration pattern.

Adding custom HTTP routes to the API with <Api.Route> and HttpRouteHandler.

Deploying, developing locally, managing environments, and debugging Webiny projects.

Use when configuring SMTP email/mailer settings in a Webiny project.

Webiny project layout, webiny.config.tsx anatomy, and extension registration.

UseCase implementation pattern — DI, Result handling, error types, decorators, CMS repositories, entry mappers, and schema-based permissions.

Building Website Builder editor components, theming, and CMS integration using @webiny/website-builder-nextjs.

Sending real-time notifications from the API to the Admin app over websockets, and reacting to them on the client.

cuOpt REST server — start server, endpoints, Python/curl client examples.

Set up, repair, or migrate to Cloudflare Turnstile bot verification in an existing frontend and backend, including server-side Siteverify.

Write, place and run tests for a server in this repo.

Turn ONE topic into a finished Vox-style paper-collage explainer / ad video, end to end on the Atlas Cloud API + local ffmpeg — script, collage keyframes…

Codex 1M context: direct OpenAI Responses API inference, safe Astra/Sol/Terra/Luna input headroom, Keychain delivery, and Mac fleet rollout.

Watch GitHub Actions CI correctly with the gh CLI — block until a run / PR check rollup is TRULY terminal, then trust the exit code.

Take a single task or issue through the COMPLETE engineering workup — grill the brief with the human → plan → review the plan → implement → review the…

Proven workflow architectural patterns from real n8n workflows.