Our review
This skill describes using Node.js 20 LTS with Express and TypeScript for backend development, covering ES modules, environment configuration, PostgreSQL connection pooling, and async patterns.
Strengths
- Uses ESM and TypeScript for modern, typed code.
- Robust PostgreSQL connection management with pooling and transactions.
- Validated environment configuration with sensible defaults.
- Clear async patterns for I/O operations.
Limitations
- Tied to a specific project (INVOOPAY); some configurations may be customized.
- Does not cover all Node.js APIs, only common patterns.
- Depends on external packages (pg, Sharp, etc.) not detailed.
Use this skill when building backend services with Node.js, Express, TypeScript, and PostgreSQL requiring async patterns and database management.
Avoid this skill for projects using other runtimes (Deno, Bun) or non-relational databases without adaptation.
Security analysis
CautionThe skill provides legitimate Node.js backend patterns but includes a hardcoded secret fallback and permits Bash execution. While no destructive actions are instructed, these elements elevate caution.
- •Hardcoded development fallback for JWT_SECRET may encourage insecure defaults.
- •Allowed Bash tool could be misused for arbitrary system commands, though it's a common backend necessity.
Examples
Create a Node.js service method to fetch a product by ID from PostgreSQL, using async/await and returning null if not found. Use the existing pool from db/client.ts.Write an environment configuration module with validated variables (PORT, DB_HOST, JWT_SECRET) and defaults. Use dotenv and export an env object.Create a function that inserts a new order and updates inventory in a PostgreSQL transaction, rolling back on error and releasing the client in a finally block.name: node description: | Node.js LTS runtime and server-side JavaScript patterns for INVOOPAY backend. Use when: working with backend services, async operations, crypto, Buffer handling, or Node.js APIs. allowed-tools: Read, Edit, Write, Glob, Grep, Bash
Node Skill
Node.js 20 LTS runtime powering Express + TypeScript backend. Uses ES modules ("type": "module") with tsx for development. PostgreSQL via pg with connection pooling. Sharp for image processing.
Quick Start
Module System (ESM)
// backend/src/server.ts - Entry point
import app from './app.js'; // .js extension required for ESM
import { env } from './config/env.js';
app.listen(env.port, () => {
console.log(`Backend listening on port ${env.port}`);
});
Environment Configuration
// backend/src/config/env.ts - Validated env with defaults
import dotenv from 'dotenv';
dotenv.config();
const required = (value: string | undefined, fallback?: string) => {
if (value) return value;
if (fallback !== undefined) return fallback;
throw new Error('Missing required environment variable');
};
export const env = {
port: Number(process.env.PORT ?? 4000),
dbHost: process.env.DB_HOST ?? 'localhost',
jwtSecret: required(process.env.JWT_SECRET, 'dev-only-secret'),
nodeEnv: process.env.NODE_ENV ?? 'development',
};
Database Connection Pool
// backend/src/db/client.ts
import pg from 'pg';
const { Pool } = pg;
export const pool = new Pool({
host: env.dbHost,
max: 20, // Max connections
idleTimeoutMillis: 30000, // Close idle after 30s
connectionTimeoutMillis: 2000,
});
pool.on('error', (err) => {
console.error('Unexpected error on idle client', err);
process.exit(-1); // Crash on pool errors
});
Key Concepts
| Concept | Usage | Example |
|---------|-------|---------|
| ESM imports | Always use .js extension | import { x } from './mod.js' |
| __dirname | Use import.meta.url | path.dirname(fileURLToPath(import.meta.url)) |
| Async/await | All I/O operations | await pool.query(...) |
| Buffer | Binary data handling | Buffer.from(data, 'hex') |
| crypto | Encryption/hashing | crypto.randomBytes(32) |
Common Patterns
Async Service Method
export const productService = {
async get(id: number, language: string = 'en') {
const result = await pool.query(
'SELECT * FROM products WHERE id = $1', [id]
);
if (!result.rows[0]) return null;
return mapProduct(result.rows[0]);
}
};
Transaction with Rollback
const client = await pool.connect();
try {
await client.query('BEGIN');
await client.query('INSERT ...', [...]);
await client.query('UPDATE ...', [...]);
await client.query('COMMIT');
} catch (error) {
await client.query('ROLLBACK');
throw error;
} finally {
client.release(); // Always release!
}
See Also
- patterns - Async patterns, error handling
- types - TypeScript integration
- modules - Project structure, imports
- errors - Error handling patterns
Related Skills
For Express routes and middleware, see the express skill. For database queries, see the postgresql skill. For TypeScript patterns, see the typescript skill.
Next.js App Router Expert
Development
A skill that turns Claude into a Next.js App Router expert.
README Generator
Development
Creates professional and comprehensive README.md files for your projects.
API Documentation Writer
Development
Generates comprehensive API documentation in OpenAPI/Swagger format.