shopify-development
Build Shopify Apps, Extensions, and Themes
Shopify development requires mastering multiple technologies: OAuth authentication, GraphQL APIs, Liquid templating, and Polaris UI components. This skill provides validated code patterns, CLI workflows, and API integration guides to accelerate your Shopify projects.
Descargar el ZIP de la skill
Subir en Claude
Ve a Configuración → Capacidades → Skills → Subir skill
Activa y empieza a usar
Pruébalo
Usando "shopify-development". Create a product query with pagination
Resultado esperado:
- query GetProducts($first: Int!, $after: String) {
- products(first: $first, after: $after) {
- edges {
- node {
- id
- title
- variants(first: 10) {
- edges {
- node {
- id
- price
- inventoryQuantity
- selectedOptions {
- name
- value
- }
- }
- }
- }
- }
- }
- pageInfo {
- hasNextPage
- endCursor
- }
- }
- }
Usando "shopify-development". Liquid template for product page
Resultado esperado:
- {% comment %} Product template with sections {% endcomment %}
- {% section 'product-hero' %}
- <div class="product-hero">
- <h1>{{ product.title }}</h1>
- <p class="price">{{ product.selected_or_first_available_variant.price | money }}</p>
- {% form 'product', product %}
- <select name="id">
- {% for variant in product.variants %}
- <option value="{{ variant.id }}">{{ variant.title }}</option>
- {% endfor %}
- </select>
- <button type="submit">Add to Cart</button>
- {% endform %}
- </div>
- {% endsection %}
Auditoría de seguridad
Riesgo bajoStatic analyzer flagged 553 potential issues, but evaluation confirms these are FALSE POSITIVES for legitimate Shopify development patterns. External commands are Shopify CLI tooling (shopify app/theme init, dev, deploy). Network calls target official Shopify domains (shopify.dev, myshopify.com). Environment access stores standard API credentials (SHOPIFY_API_KEY, SHOPIFY_API_SECRET). The skill follows Shopify best practices with OAuth CSRF protection and secure credential handling. Low risk due to legitimate development tooling usage.
Problemas de riesgo bajo (3)
Factores de riesgo
⚙️ Comandos externos (2)
🌐 Acceso a red (2)
🔑 Variables de entorno (2)
📁 Acceso al sistema de archivos (1)
Puntuación de calidad
Lo que puedes crear
E-commerce Merchant Building Custom Tools
Create apps to automate inventory management, generate custom reports, or integrate third-party services like shipping providers.
Agency Developer Building Client Solutions
Rapidly scaffold client projects with checkout customizations, admin extensions, and theme modifications using proven patterns.
Indie Developer Launching Shopify Apps
Build and monetize apps using billing integration, webhooks, and Shopify Functions for the Shopify App Store.
Prueba estos prompts
Create a new Shopify app with Node.js and React using the Shopify CLI. Include OAuth authentication, GraphQL API client setup, and basic product listing page. Configure access scopes for reading products and orders.
Generate a checkout UI extension that adds a custom discount code field and gift message input. Use Polaris components and the checkout extension API. Include TypeScript types and example localization strings.
Write a GraphQL query to fetch products with variants, images, and metafields. Include cursor-based pagination and filter by collection. Validate against Shopify Admin API 2026-01 schema.
Create a webhook handler for order creation events. Verify HMAC signature, parse the webhook payload, and trigger a fulfillment workflow. Include error handling and retry logic for failed deliveries.
Mejores prácticas
- Always verify OAuth state parameter to prevent CSRF attacks during app installation
- Use cursor-based pagination for GraphQL queries to handle large datasets efficiently
- Store API credentials in environment variables, never commit secrets to version control
- Implement webhook signature verification using HMAC-SHA256 for all webhook handlers
- Follow Polaris design system for consistent UI across Shopify admin extensions
Evitar
- Hardcoding API credentials or access tokens directly in source code files
- Making unauthenticated GraphQL requests without proper OAuth token exchange
- Ignoring rate limit headers (X-Shopify-Shop-Domain) and query cost in API responses
- Using REST API when GraphQL provides more efficient batch operations
- Skipping webhook HMAC verification which allows malicious webhook injection
Preguntas frecuentes
What Shopify API version does this skill support?
Do I need a Shopify Partner account to use this skill?
Can this skill help with Shopify Plus features?
How do I test my app before publishing to the App Store?
What is the difference between app extensions and theme extensions?
How does billing work for Shopify apps?
Detalles del desarrollador
Autor
sickn33Licencia
MIT
Repositorio
https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/shopify-developmentRef.
main
Estructura de archivos