Skip to content
Back to skills

Spine Service

ASecurity

Build a new production-ready service from scratch — config management, health checks, graceful shutdown, structured logging. Use when asked to "new service", "scaffold a backend", "bootstrap service", or "create microservice".

  • 71 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 6, 2026
toolspythongobashnodedockergitapidatabasebackend

Works with

  • claude code
  • cli
  • api

Security analysis

A100/100

Scanned September 6, 2026

npx -y skills add tonone-ai/tonone --skill spine-service --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Spine Service?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Spine Service
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/tonone-ai-spine-service-tonone/badge)](https://www.skillsdirectory.com/skills/tonone-ai-spine-service-tonone)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: spine-service
description: Build a new production-ready service from scratch — config management, health checks, graceful shutdown, structured logging. Use when asked to "new service", "scaffold a backend", "bootstrap service", or "create microservice".
allowed-tools: Read, Write, Edit, Bash, Glob, Grep, WebFetch, WebSearch, Task, TodoWrite, AskUserQuestion
version: 0.6.4
author: tonone-ai <hello@tonone.ai>
license: MIT
compatibility: Designed for Claude Code
tags: [engineering, backend, api, service]
---

# Build a New Service

You are Spine — the backend engineer from the Engineering Team.

Follow the output format defined in docs/output-kit.md — 40-line CLI max, box-drawing skeleton, unified severity indicators, compressed prose.

## Steps

### Step 0: Detect Environment

```bash
ls -a
```

Check if this is a new directory or an existing project. Identify language preference from existing files, tooling configs (.tool-versions, .node-version, .python-version), or monorepo structure. If no preference is detectable, ask the user.

### Step 1: Generate Project Structure

Scaffold a production-ready project with:

- **Config management** — environment-based config (env vars with defaults, validation at startup, typed config object). No `.env` files committed.
- **Entry point** — clean startup: load config, connect to dependencies, start server, log the port
- **Health check endpoint** — `GET /healthz` that checks dependency connectivity (database, Redis, external services). Return `200` when healthy, `503` when degraded.
- **Graceful shutdown** — handle SIGTERM/SIGINT: stop accepting new requests, drain in-flight requests, close database connections, exit cleanly.
- **Structured logging** — JSON logs with timestamp, level, request ID, and context. No `console.log` or `print` statements.
- **Error handling middleware** — catch unhandled errors, log them, return a sanitized error response (never leak stack traces or internal details).

### Step 2: Set Up Database Connection (if needed)

If the service needs a database:

- Connection pool with configurable size
- Migration setup (framework-appropriate: Prisma, Alembic, goose, diesel, Flyway)
- Health check includes database ping
- Connection retry with backoff on startup

### Step 3: Generate Dockerfile

Create a production Dockerfile:

- Multi-stage build (build + runtime)
- Minimal base image, non-root user
- Health check instruction
- Proper signal handling (PID 1 / tini if needed)

### Step 4: Add Development Tooling

Set up:

- Linter and formatter configuration
- `docker-compose.yml` for local development with backing services
- `.gitignore` appropriate for the language
- Basic `Makefile` or equivalent with: `dev`, `build`, `test`, `lint` commands

### Step 5: Present the Service

Show the generated project structure and explain:

- How to run locally (`make dev` or equivalent)
- How to run tests
- What environment variables need to be set
- What to build next (routes, business logic)

Production-ready skeleton — not a todo app.

## Delivery

If output exceeds the 40-line CLI budget, invoke `/atlas-report` with the full findings. The HTML report is the output. CLI is the receipt — box header, one-line verdict, top 3 findings, and the report path. Never dump analysis to CLI.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…