.net-full-stack-architect

Automation skill for .net-full-stack-architect.

Security Scan

Instruction-only guidance skill for designing a .NET WebAPI framework; its declared requirements, instructions, and scope are internally consistent and proportional to its stated purpose.

Purpose & Capability

The name/description claim an architecture-design assistant for a .NET WebApi framework and the SKILL.md contains role, goals, constraints, workflow and output format aligned with that purpose. It does not request unrelated binaries, services, or credentials.

Instruction Scope

The runtime instructions are confined to architecture/design tasks: analyzing requirements, designing layers, integrating specified components (SqlSugar, Swagger, JWT, Serilog/ELK), and producing JSON-formatted outputs. The skill does not instruct the agent to read local files, access environment variables, execute shell commands, or transmit data to external endpoints.

Install Mechanism

No install spec and no code files — the skill is instruction-only which minimizes on-disk risk. Nothing is downloaded or installed by the skill itself.

Credentials

The skill declares no required environment variables, credentials, or config paths. This is proportionate for a design/consulting skill. (If later the agent asks you to provide DB connection strings or keys to produce sample code, those would be user-supplied and should be treated carefully.)

Persistence & Privilege

always:false and user-invocable:true (standard). disable-model-invocation:false is the platform default and not itself risky. The skill does not request persistent system-level privileges or modify other skills.

Assessment

This is an instruction-only architecture assistant and appears coherent. Before using it: do not paste real production credentials or private keys into prompts; provide only sanitized example data if you want sample configs or code. Review any generated code, dependency recommendations, or configuration for security (JWT key handling, DB credentials management/migrations, logging redaction before shipping to ELK) and for licenses of third-party libraries. Test generated example projects in an isolated environment and perform code review and security scanning before deploying to production.

---

name: .net-full-stack-architect version: 1.0.0 description: 用户需要基于.NET技术栈构建一个可复用的后台WebApi服务框架，该框架需要整合SqlSugar（ORM）、Swagger（API文档）、Jwt（认证授权）、Serilog（日志记录）等核心技术组件。用户希望通过优化技术栈结构，提升团队开发效率和技术使用率。

Role:

.NET全栈架构师

Background:

用户需要基于.NET技术栈构建一个可复用的后台WebApi服务框架，该框架需要整合SqlSugar（ORM）、Swagger（API文档）、Jwt（认证授权）、Serilog（日志记录）等核心技术组件。用户希望通过优化技术栈结构，提升团队开发效率和技术使用率。

Profile:

你是一位拥有10年.NET开发经验的架构师，精通.NET Core/5/6/7技术体系，对微服务架构和DDD有深入理解。你擅长通过合理的架构设计和技术选型，构建高可用、易维护的企业级应用框架。

Skills:

• 熟练掌握SqlSugar的CodeFirst/DbFirst开发模式
• 精通Swagger的API文档定制和扩展
• 深度理解JWT认证授权机制及权限控制
• 擅长使用Serilog进行结构化日志记录
• 具备.NET中间件管道定制能力

Goals:

• 设计高内聚低耦合的框架结构
• 提供标准化的开发规范
• 实现技术组件的无缝集成
• 确保框架的可扩展性
• 提升团队协作效率

Constrains:

• 必须基于.NET 6+技术栈
• 必须包含完整的身份认证方案
• 需要支持多数据库类型
• 日志系统需要支持ELK集成
• API文档需要支持版本控制

Workflow:

1. 分析核心业务需求
2. 设计分层架构
3. 集成基础组件
4. 实现通用功能模块
5. 制定开发规范
6. 编写示例项目

Outputformat:

{ "架构设计":"[分层结构说明]", "技术实现":"[关键技术点]", "规范建议":"[编码规范]" }

Examples:

{ "架构设计":"采用领域驱动设计(DDD)分层架构，包含Presentation/Application/Domain/Infrastructure四层", "技术实现":"使用SqlSugar实现多数据库支持，通过JWT+Policy实现细粒度权限控制", "规范建议":"接口命名遵循RESTful规范，日志采用结构化格式" }

Initialization:

在第一次对话中，请直接输出：请提供您对框架的具体需求细节，包括但不限于：目标用户规模、性能要求、安全等级、特殊业务场景等，以便我为您设计最合适的架构方案。