shopify-development
Build Shopify Apps, Extensions, and Themes
Shopify development requires mastering multiple technologies: OAuth authentication, GraphQL APIs, Liquid templating, and Polaris UI components. This skill provides validated code patterns, CLI workflows, and API integration guides to accelerate your Shopify projects.
Télécharger le ZIP du skill
Importer dans Claude
Allez dans Paramètres → Capacités → Skills → Importer un skill
Activez et commencez à utiliser
Tester
Utilisation de "shopify-development". Create a product query with pagination
Résultat attendu:
- query GetProducts($first: Int!, $after: String) {
- products(first: $first, after: $after) {
- edges {
- node {
- id
- title
- variants(first: 10) {
- edges {
- node {
- id
- price
- inventoryQuantity
- selectedOptions {
- name
- value
- }
- }
- }
- }
- }
- }
- pageInfo {
- hasNextPage
- endCursor
- }
- }
- }
Utilisation de "shopify-development". Liquid template for product page
Résultat attendu:
- {% comment %} Product template with sections {% endcomment %}
- {% section 'product-hero' %}
- <div class="product-hero">
- <h1>{{ product.title }}</h1>
- <p class="price">{{ product.selected_or_first_available_variant.price | money }}</p>
- {% form 'product', product %}
- <select name="id">
- {% for variant in product.variants %}
- <option value="{{ variant.id }}">{{ variant.title }}</option>
- {% endfor %}
- </select>
- <button type="submit">Add to Cart</button>
- {% endform %}
- </div>
- {% endsection %}
Audit de sécurité
Risque faibleStatic analyzer flagged 553 potential issues, but evaluation confirms these are FALSE POSITIVES for legitimate Shopify development patterns. External commands are Shopify CLI tooling (shopify app/theme init, dev, deploy). Network calls target official Shopify domains (shopify.dev, myshopify.com). Environment access stores standard API credentials (SHOPIFY_API_KEY, SHOPIFY_API_SECRET). The skill follows Shopify best practices with OAuth CSRF protection and secure credential handling. Low risk due to legitimate development tooling usage.
Problèmes à risque faible (3)
Facteurs de risque
⚙️ Commandes externes (2)
🌐 Accès réseau (2)
🔑 Variables d’environnement (2)
📁 Accès au système de fichiers (1)
Score de qualité
Ce que vous pouvez construire
E-commerce Merchant Building Custom Tools
Create apps to automate inventory management, generate custom reports, or integrate third-party services like shipping providers.
Agency Developer Building Client Solutions
Rapidly scaffold client projects with checkout customizations, admin extensions, and theme modifications using proven patterns.
Indie Developer Launching Shopify Apps
Build and monetize apps using billing integration, webhooks, and Shopify Functions for the Shopify App Store.
Essayez ces prompts
Create a new Shopify app with Node.js and React using the Shopify CLI. Include OAuth authentication, GraphQL API client setup, and basic product listing page. Configure access scopes for reading products and orders.
Generate a checkout UI extension that adds a custom discount code field and gift message input. Use Polaris components and the checkout extension API. Include TypeScript types and example localization strings.
Write a GraphQL query to fetch products with variants, images, and metafields. Include cursor-based pagination and filter by collection. Validate against Shopify Admin API 2026-01 schema.
Create a webhook handler for order creation events. Verify HMAC signature, parse the webhook payload, and trigger a fulfillment workflow. Include error handling and retry logic for failed deliveries.
Bonnes pratiques
- Always verify OAuth state parameter to prevent CSRF attacks during app installation
- Use cursor-based pagination for GraphQL queries to handle large datasets efficiently
- Store API credentials in environment variables, never commit secrets to version control
- Implement webhook signature verification using HMAC-SHA256 for all webhook handlers
- Follow Polaris design system for consistent UI across Shopify admin extensions
Éviter
- Hardcoding API credentials or access tokens directly in source code files
- Making unauthenticated GraphQL requests without proper OAuth token exchange
- Ignoring rate limit headers (X-Shopify-Shop-Domain) and query cost in API responses
- Using REST API when GraphQL provides more efficient batch operations
- Skipping webhook HMAC verification which allows malicious webhook injection