---
name: qierkang-backend-code-review
description: "Review TypeScript, Fastify, API, persistence, or server configuration changes for correctness, security, contract stability, data integrity, and verification gaps. Use for pending-change, diff, snippet, or focused backend review requests."
license: "MIT"
metadata:
  decimalai-skill-id: "c3d59cb5-6d39-4f04-a4d7-a450c7ad3e0b"
  decimalai-version-id: "9f2274a1-0b42-47af-8bd8-e7b16655b276"
  decimalai-version: "1"
  decimalai-body-sha256: "74fda207910e4dcc4e7a4207c88e0228b89fe76570087567fe1a21eb01e2ed5e"
  decimalai-name: "qierkang/backend-code-review"
  decimalai-format: "1"
  decimalai-invocation: "model"
  decimalai-category: "code-review"
  decimalai-source: "https://app.decimal.ai/s/qierkang-backend-code-review@1/SKILL.md"
---
# Backend Code Review

Review only the requested files or current backend changes.

## Required Context

1. Read the root and server package instructions.
2. Inspect the diff and the callers, routes, schemas, and persistence owners around each change.
3. Load the backend API checklist when validation, errors, configuration, or contracts are affected.

## Review Priorities

1. Correctness, regressions, and error-path behavior.
2. Authentication, authorization, input validation, and secret exposure.
3. API and schema compatibility.
4. Transaction, idempotency, concurrency, and data-integrity risks.
5. Resource use, dependency readiness, and operational failure modes.
6. Missing behavior-level verification.

## Output

- Findings first, ordered by severity.
- Include file and tight line ranges.
- Explain the failure mode and a concrete fix direction.
- Do not report style preferences as defects.
- If no actionable findings exist, say so and list remaining verification risk.