designing-architectures
Architecture knowledge reference covering API design, security architecture, cloud-native patterns, caching strategies, message queues, and data security. Use when designing system architecture, APIs, or cloud-native infrastructure.
git clone --depth 1 https://github.com/telagod/code-abyss /tmp/designing-architectures && cp -r /tmp/designing-architectures/skills/designing-architectures ~/.claude/skills/designing-architecturesSKILL.md
# 阵法秘典 · 架构设计 ## 路由 | 意图 | 秘典 | 核心 | |------|------|------| | API 设计 | [api-design](api-design.md) | RESTful、GraphQL、gRPC、OpenAPI | | 安全架构 | [security-arch](security-arch.md) | 零信任、IAM、威胁建模、合规 | | 云原生 | [cloud-native](cloud-native.md) | 容器、K8s、Serverless、Service Mesh | | 消息队列 | [message-queue](message-queue.md) | Kafka、RabbitMQ、事件驱动、CQRS | | 缓存 | [caching](caching.md) | Redis、CDN、一致性、穿透/雪崩 | ## 决策矩阵 | 决策点 | 选项 A | 选项 B | 判据 | |--------|--------|--------|------| | 同步 vs 异步 | REST/gRPC 同步调用 | 消息队列异步 | 延迟敏感→同步；解耦/削峰→异步 | | 单体 vs 微服务 | 单体(模块化) | 微服务 | 团队<5→单体；独立部署需求→微服务 | | SQL vs NoSQL | RDBMS | MongoDB/DynamoDB | 强一致/关联→SQL；灵活 schema/高吞吐→NoSQL | | 缓存策略 | Cache-Aside | Write-Through | 读多写少→Aside；写后即读→Through | | API 风格 | REST | GraphQL | 资源型 CRUD→REST；复杂聚合/前端驱动→GraphQL | | 事件架构 | 事件通知 | 事件溯源(ES) | 简单解耦→通知；审计/回溯→ES+CQRS | ## 原则 ``` SOLID: S单一职责 O开闭 L里氏替换 I接口隔离 D依赖倒置 分布式: CAP定理 | BASE最终一致 | 幂等设计 安全: 纵深防御 | 最小权限 | 零信任 扩展: 水平优先 | 无状态服务 | 数据分片 ```
Analyzes code changes, detects documentation drift, and evaluates change impact scope. Use when reviewing diffs, checking doc sync, or running pre-commit analysis. Automatically triggered after design-level changes or refactoring.
Scans code for security vulnerabilities, detects dangerous patterns, and ensures security decisions are documented. Use when running security scans, auditing code, or checking for OWASP issues, injection risks, or sensitive data leaks. Automatically triggered on new modules, security-related changes, or post-refactor.
Processes Excel spreadsheet files (.xlsx, .xlsm, .csv). Creates workbooks, builds formulas, preserves formatting, analyzes tabular data, and validates financial models with zero-formula-error delivery. Use when working with spreadsheet files or tabular data analysis. Do NOT use for Word documents, PDFs, presentations, or database pipelines.
Frontend UI design system selector and implementation guide covering Glassmorphism, Liquid Glass (Apple-style), Neubrutalism, and Claymorphism. Use when building UI components, choosing a visual aesthetic, implementing design tokens, or auditing accessibility/contrast on themed surfaces. Provides per-style tokens, component patterns, dark mode, and a11y constraints.
安全架构与治理：威胁建模 (STRIDE/PASTA/LINDDUN)、零信任身份架构、IAM/SSO/MFA/PAM、合规框架 (SOC2/PCI/HIPAA/GDPR)、DLP、隐私工程、安全控制设计。Use when designing security architecture, threat modeling new systems, implementing zero-trust identity, designing IAM/SSO/PAM, building compliance evidence chains, or planning privacy-by-design.
DevOps knowledge reference covering Git workflows, testing strategies, DevSecOps, release pipeline orchestration (release.yml, multi-arch images, cosign integration), CI/CD pipelines, database management, observability, and performance optimization. Use when working with Git, CI/CD, release pipelines, ghcr image publishing, testing, monitoring, or infrastructure automation.
AI agent and LLM system engineering reference covering single-agent dev (ReAct, tool calling, plan-execute), multi-agent coordination (swarm, role decomposition, file locking), LLM security (prompt injection, jailbreak defense, output filtering), RAG architecture (chunking, hybrid retrieval, rerank), and prompt engineering / evaluation (RAGAS, LLM-as-Judge). Use when building AI agents, designing RAG pipelines, orchestrating multi-agent workflows, hardening LLM apps, or writing prompts.
Checks code quality metrics including complexity, duplication, naming conventions, and function length. Use when running quality gates, reviewing code smells, or checking lint rules. Automatically triggered on complex modules or post-refactor.