📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills shopify-apps
📦
shopify-apps
Content revision r1 Safe
Build Shopify Apps with Expert Patterns
Shopify app work requires current patterns for embedded apps, webhooks, APIs, billing, and extensions. This skill guides Claude, Codex, and Claude Code through focused implementation choices.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "shopify-apps" from https://skillstore.io/skills/sickn33-shopify-apps.md and its manifest at https://skillstore.io/api/skills/sickn33-shopify-apps/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "shopify-apps". I need a webhook strategy for order updates.
Expected outcome:
The skill recommends verifying HMAC, returning the response quickly, queuing slower work, and planning retry-safe processing.
Using "shopify-apps". I am building a new admin feature for merchants.
Expected outcome:
The skill steers the design toward embedded App Bridge behavior, Polaris components, and GraphQL Admin API operations.
Using "shopify-apps". I want to prepare my app for review.
Expected outcome:
The skill highlights launch checks for protected customer data access, billing behavior, GDPR handlers, and current App Bridge usage.
Security Audit
Safev4 • 7/7/2026 Open versioned report
Static analysis reported no suspicious patterns in the single prompt-only SKILL.md file. Manual review found no prompt injection, code execution, network access, filesystem access, or secret-handling instructions. No security remediation is required.
1
Files scanned
43
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-shopify-apps/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-shopify-apps?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-shopify-apps?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-shopify-apps/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-shopify-apps.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). shopify-apps security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-shopify-apps/audits/4BibTeX citation
@techreport{sickn33-sickn33-shopify-apps-2026,
author = {sickn33},
title = {shopify-apps security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/sickn33-shopify-apps/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "shopify-apps security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/sickn33-shopify-apps/audits/4"
identifiers:
- type: other
value: "skillstore:sickn33-shopify-apps:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance
What You Can Build
Start an Embedded Shopify App
Plan a modern embedded app using React Router, App Bridge, Polaris, and Shopify Admin integration patterns.
Stabilize Webhook Processing
Design webhook flows that verify HMAC signatures, respond quickly, and move slower work into background processing.
Review Launch Requirements
Check app patterns for GraphQL use, billing, protected customer data access, GDPR handlers, and extension choices.
Try These Prompts
Plan My First Shopify App
I am starting a Shopify app. Help me choose the core architecture, app setup steps, and first implementation priorities.
Choose Embedded App Architecture
Review my embedded Shopify app plan and recommend how to use App Bridge, Polaris, navigation, and admin integration cleanly.
Design Secure Webhooks
Design a Shopify webhook handling strategy that verifies HMAC signatures, responds immediately, processes work asynchronously, and handles retries.
Review Production Readiness
Audit my Shopify app launch plan for GraphQL usage, rate limits, billing, protected customer data access, GDPR handlers, and extensions.
Best Practices
- Use GraphQL Admin API for new app features unless Shopify requires another API.
- Respond to webhooks quickly, then process slower work asynchronously.
- Document protected customer data needs before requesting access.
Avoid
- Starting new builds on REST API patterns without a Shopify requirement.
- Processing long webhook work before returning the response.
- Polling shop data when a webhook can trigger the workflow.
Frequently Asked Questions
What kind of Shopify work does this skill support?
It supports app architecture, embedded admin flows, App Bridge, Polaris, webhooks, GraphQL Admin API, billing, and extensions.
Does this skill generate a complete Shopify app?
No. It provides implementation guidance and review prompts, not a full generated project.
Can it help with webhook security?
Yes. It emphasizes HMAC verification, fast responses, asynchronous processing, and retry-aware design.
Does it prefer GraphQL or REST?
It recommends GraphQL Admin API patterns for new Shopify app code.
Can it help with Shopify app review preparation?
Yes. It can guide checks for billing, GDPR handlers, protected customer data access, and app extension choices.
Which AI tools can use this skill?
The report lists support for Claude, Codex, and Claude Code.
Developer Details
Author
sickn33License
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
9f814fc6a43fd99946f2da5e0df231c65a38bc76
Maintenance freshness
7/18/2026
Usage
7 downloads · 138 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-fullstack
82Build Fullstack Apps with Senior Patterns
Teams need consistent setup, architecture, and review guidance for modern web applications. This skill provides scaffolders, workflow references, and quality prompts for React, Next.js, Node.js, GraphQL, and PostgreSQL projects.
Coding & Development View
📦
senior-architect
81Design Scalable Software Architectures
Architecture decisions are hard to compare across web, mobile, backend, and cloud systems. This skill provides structured guides and local scaffold scripts for reports, dependency review, and trade-off documentation.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
api-designer
84Design Production-Ready APIs
by AutumnsGrove
Inconsistent API contracts create integration errors and costly migrations. This skill guides REST, GraphQL, OpenAPI, authentication, versioning, validation, and documentation decisions.
Coding & Development View
📦
api-design
80Design Better REST and GraphQL APIs
by supercent-io
API teams need consistent contracts before implementation starts. This skill guides resource design, request formats, errors, versioning, and documentation.
Coding & Development View
📦
api-design-framework
80Design Consistent APIs Across Protocols
by ArieGoldkin
Inconsistent API contracts create integration errors and expensive migrations. This skill applies reusable REST, GraphQL, gRPC, OpenAPI, and AsyncAPI patterns to create clear contracts.
Coding & Development View
📦
designing-apis
79Design Clean REST and GraphQL APIs
by CloudAI-X
Designing consistent APIs from scratch is slow and error-prone, and inconsistent endpoints confuse consumers. This skill gives Claude a structured workflow with proven patterns for endpoints, errors, versioning, authentication, and OpenAPI documentation.
Coding & Development View
📦
graphql-schema
78Create GraphQL Operations with Generated Types
by ChrisWiles
GraphQL client work often creates duplicate operations, weak error handling, and stale generated types. This skill guides consistent .gql files, Apollo generated hooks, codegen steps, and mutation UI safeguards.
Coding & Development View
📦
stripe-handler
77Build Custom Stripe Payment Flows
by AayushBaniya2006
Custom payment flows need careful checkout, webhook, and fulfillment logic. This skill guides Stripe sessions, metadata routing, and background processing for non-standard purchases.
Coding & Development View