agent-skills-hub/shopify-apps
skills/shopify-apps/SKILL.md
Expert patterns for Shopify app development including Remix/React Router apps, embedded apps with App Bridge, webhook handling, GraphQL Admin API, Polaris components, billing, and app extensions. Use when: shopify app, shopify, embedded app, polaris, app bridge.
$ install --global
skillsauthnpx skillsauth add agent-skills-hub/agent-skills-hub shopify-appsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Mar 29, 2026, 8:15 PM36.9s1 file scanned
SKILL.md
- name:
- shopify-apps
- description:
- Expert patterns for Shopify app development including Remix/React Router apps, embedded apps with App Bridge, webhook handling, GraphQL Admin API, Polaris components, billing, and app extensions. Use when: shopify app, shopify, embedded app, polaris, app bridge.
- source:
- vibeship-spawner-skills (Apache 2.0)
Shopify Apps
Patterns
React Router App Setup
Modern Shopify app template with React Router
Embedded App with App Bridge
Render app embedded in Shopify Admin
Webhook Handling
Secure webhook processing with HMAC verification
Anti-Patterns
❌ REST API for New Apps
❌ Webhook Processing Before Response
❌ Polling Instead of Webhooks
⚠️ Sharp Edges
| Issue | Severity | Solution | |-------|----------|----------| | Issue | high | ## Respond immediately, process asynchronously | | Issue | high | ## Check rate limit headers | | Issue | high | ## Request protected customer data access | | Issue | medium | ## Use TOML only (recommended) | | Issue | medium | ## Handle both URL formats | | Issue | high | ## Use GraphQL for all new code | | Issue | high | ## Use latest App Bridge via script tag | | Issue | high | ## Implement all GDPR handlers |
Related Skills
agent-skills-hub/xquik-social-research
tools
VerifiedTrustedCommunity
Research public X data with Xquik. Use for tweet search, tweet lookup, user discovery, profile timelines, threads, followers, trends, exports, monitoring plans, or MCP setup. Keep public reads bounded. Require explicit approval before private reads, writes, persistent resources, or bulk jobs. Not affiliated with X Corp.
74SKILL.mdUpdated Aug 8, 2026
agent-skills-hub/skyvern-browser-automation
tools
VerifiedTrustedCommunity
AI-powered browser automation — navigate sites, fill forms, extract structured data, log in with stored credentials, and build reusable workflows.
74SKILL.mdUpdated Aug 8, 2026
agent-skills-hub/build-webgl-liquid-glass
development
VerifiedTrustedCommunity
Build production-ready GPU liquid-glass surfaces with liquid-gl for React or DOM UIs. Default for refractive cards, notifications, panels, GPU bevels, and WebGL glass.
74SKILL.mdUpdated Aug 8, 2026
agent-skills-hub/build-sdf-liquid-glass
development
VerifiedTrustedCommunity
Build lightweight SDF/canvas displacement glass with Vaso. Use for responsive refractive cards, no-WebGL fallbacks, many compact surfaces, or explicit SDF requests.
74SKILL.mdUpdated Aug 8, 2026