engineering-advanced — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited engineering-advanced (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 1 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Advanced engineering patterns for AI-native startups building agents, RAG systems, APIs, and scalable infrastructure.
Agent design, RAG, retrieval augmented generation, MCP, API design, REST, GraphQL, CI/CD, GitHub Actions, Docker, Kubernetes, microservices, event-driven, message queues, caching, database design, system design, observability, infrastructure as code, AI pipeline
Agent architecture patterns:
| Pattern | Use Case | Complexity |
|---|---|---|
| Single agent + tools | Simple tasks, clear workflow | Low |
| Agent with sub-agents | Complex tasks, domain separation | Medium |
| Agent team (orchestrator) | Multi-domain, parallel work | High |
| Agent swarm | Autonomous exploration, research | Very High |
Agent design principles:
Agent evaluation:
RAG pipeline components:
Documents → Chunking → Embedding → Vector Store → Retrieval → GenerationChunking strategies:
| Strategy | Best For | Chunk Size |
|---|---|---|
| Fixed-size | Simple docs, consistent structure | 256-512 tokens |
| Semantic | Complex docs, mixed content | Variable |
| Recursive | Hierarchical content | Parent + child |
| Document-level | Short docs, complete context needed | Full document |
Retrieval optimization:
Vector databases:
| Database | Self-hosted | Cloud | Best For |
|---|---|---|---|
| pgvector | Yes | Supabase, Neon | Already using PostgreSQL |
| Pinecone | No | Yes | Managed, serverless |
| Weaviate | Yes | Yes | Multi-modal, hybrid search |
| Qdrant | Yes | Yes | Performance, filtering |
| ChromaDB | Yes | No | Prototyping, local dev |
RAG quality metrics:
REST API design rules:
/users, not /getUsers)snake_case for JSON, plural nouns for collections/v1/) preferred over headersAPI response format:
{
"data": { ... },
"meta": { "page": 1, "total": 100 },
"errors": null
}Error response format:
{
"error": {
"code": "VALIDATION_ERROR",
"message": "Email is required",
"details": [{ "field": "email", "issue": "missing" }]
}
}Rate limiting:
429 Too Many Requests with Retry-After headerPipeline stages:
Push → Lint → Test → Build → Security Scan → Deploy (Staging) → Deploy (Production)GitHub Actions best practices:
@latest)Deployment strategies:
| Strategy | Risk | Complexity | Best For |
|---|---|---|---|
| Direct deploy | High | Low | Internal tools, early stage |
| Blue/Green | Low | Medium | Zero-downtime deploys |
| Canary | Low | High | High-traffic production |
| Feature flags | Very Low | Medium | Gradual rollout |
MCP (Model Context Protocol) server structure:
MCP tool design principles:
Three pillars:
Essential alerts:
Tool recommendations:
references/agent-design.md — Agent architecture, evaluation, prompt engineeringreferences/rag-architecture.md — RAG pipeline design, chunking, retrieval optimizationreferences/api-design.md — REST/GraphQL patterns, versioning, error handlingreferences/cicd.md — Pipeline architecture, deployment strategies, GitHub Actionsreferences/mcp-builder.md — MCP server development, tool design, testing~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.