Skip to content
Back to skills

B14z31ng Chatbot .

ASecurity

This file defines the **engineering skills, standards, and rules** that must be followed while developing the AI-powered chatbot system.

  • 4 stars
  • 0 votes
  • 0 copies
  • 3 views
  • Added September 12, 2026
developmentpythonrustreactnextjsfastapidockertestinggitapifrontend

Works with

  • api

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned September 12, 2026

npx -y skills add aibot88/sec_skill_store --skill b14z31ng-chatbot-. --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of B14z31ng Chatbot .?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for B14z31ng Chatbot .
[![Security: A β€” Skills Directory](https://www.skillsdirectory.com/api/skills/aibot88-b14z31ng-chatbot/badge)](https://www.skillsdirectory.com/skills/aibot88-b14z31ng-chatbot)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
# 🧠 SKILL.md β€” Engineering Standards & Capabilities

## πŸ“Œ Purpose

This file defines the **engineering skills, standards, and rules** that must be followed while developing the AI-powered chatbot system.

It ensures:

* Consistent code quality
* Proper use of AI tools (Copilot/Codex)
* Industry-standard architecture
* Maintainability and scalability

---

# πŸ—οΈ Core Engineering Skills Required

## 1. Backend Development (Python)

* Strong knowledge of FastAPI
* REST API design
* Async programming
* Dependency injection
* Middleware usage

## 2. AI / NLP Engineering

* Retrieval-Augmented Generation (RAG)
* Embeddings & Vector Search
* Prompt engineering (strict grounding)
* Context handling
* LLM limitations (hallucination control)

## 3. Data Processing

* Text chunking strategies
* Document parsing (PDF, HTML, TXT)
* Data cleaning

## 4. Frontend Development

* React / Next.js basics
* API integration
* State management (chat history)

## 5. DevOps Basics

* Docker
* Environment variables
* Deployment pipelines

---

# 🧩 System Capabilities

## Chatbot Capabilities

* Answer ONLY from knowledge base
* Reject unknown queries gracefully
* Maintain short-term conversation memory

## Knowledge Base Capabilities

* Accept multiple formats:

  * PDF
  * Text
  * Web content
* Incremental updates (no retraining)

## Retrieval Capabilities

* Semantic search using embeddings
* Top-K document retrieval
* Context filtering

---

# πŸ“ Coding Standards

## General Rules

* Use clear, descriptive names
* Keep functions small and focused
* Avoid duplicate logic
* Follow modular design

## File Naming

* snake_case for Python files
* camelCase for frontend variables
* PascalCase for classes

## Function Rules

* One responsibility per function
* Type hints required
* Docstrings required

Example:

```python
def retrieve_documents(query: str) -> list[str]:
    """Retrieve top relevant documents for a query."""
```

---

# 🧱 Architecture Rules

## MUST FOLLOW

* Separation of concerns:

  * API layer
  * Service layer
  * RAG pipeline
* No business logic inside routes
* No hardcoded values

## RAG Rules

* ALWAYS retrieve before generation
* NEVER let LLM answer without context
* STRICT grounding prompt required

---

# πŸ€– Copilot / Codex Usage Rules

## Allowed Usage

* Boilerplate code
* Repetitive functions
* API scaffolding
* Data loaders

## Restricted Usage

* Architecture decisions
* Security logic
* Prompt design (must be reviewed manually)

## Validation Rule

Every generated code MUST be:

* Read
* Understood
* Tested

---

# 🧠 Prompt Engineering Rules

## MUST INCLUDE

* "Answer ONLY from provided context"
* "If not found, say not in knowledge base"

## MUST AVOID

* Open-ended generation
* Assumptions beyond context

---

# πŸ“Š Logging Standards

## Log Types

* INFO: normal operations
* WARNING: recoverable issues
* ERROR: failures

## MUST LOG

* Incoming requests
* Retrieval results
* Errors

---

# πŸ” Security Standards

* Use environment variables for secrets
* Implement authentication (JWT)
* Validate all inputs

---

# πŸ§ͺ Testing Standards

## Required Tests

* Unit tests
* API tests
* Retrieval accuracy tests

## Example

Input β†’ Expected Output validation

---

# πŸ“¦ Git & Version Control

## Rules

* Meaningful commit messages
* Feature-based branches
* No direct commits to main

Example:

```
feat: add document ingestion pipeline
fix: correct embedding logic
```

---

# πŸ“ Documentation Standards

## MUST INCLUDE

* README.md
* API documentation
* Setup instructions

---

# πŸš€ Performance Guidelines

* Limit context size
* Optimize chunk size
* Cache frequent queries

---

# ⚠️ Common Mistakes to Avoid

❌ Training LLM instead of using RAG
❌ No fallback for unknown queries
❌ Large unchunked documents
❌ Blindly trusting Copilot code
❌ Mixing business logic with API routes

---

# βœ… Definition of Done

A feature is complete when:

* Code is clean and modular
* Tested properly
* Logged correctly
* Documented
* Follows PROJECT_PLAN.md

---

# 🧭 Final Rule

> Always follow PROJECT_PLAN.md.
> SKILL.md defines HOW to build.
> PROJECT_PLAN.md defines WHAT to build.

Files in this skill

  • SKILL.md4.1 KB
  • source.json715 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.