bereniketech/shopify-apps
skills/ecommerce/shopify-apps/SKILL.md
Modern Shopify app template with React Router
development
Updated Apr 19, 2026
$ install --global
skillsauthnpx skillsauth add bereniketech/claude_kit shopify-appsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 19, 2026, 2:22 AM7.1s1 file scanned
SKILL.md
- name:
- shopify-apps
- description:
- Modern Shopify app template with React Router
- risk:
- safe
- source:
- vibeship-spawner-skills (Apache 2.0)
- date_added:
- 2026-02-27
Shopify Apps
Patterns
React Router App Setup
Modern Shopify app template with React Router
Embedded App with App Bridge
Render app embedded in Shopify Admin
Webhook Handling
Secure webhook processing with HMAC verification
Anti-Patterns
❌ REST API for New Apps
❌ Webhook Processing Before Response
❌ Polling Instead of Webhooks
⚠️ Sharp Edges
| Issue | Severity | Solution | |-------|----------|----------| | Issue | high | ## Respond immediately, process asynchronously | | Issue | high | ## Check rate limit headers | | Issue | high | ## Request protected customer data access | | Issue | medium | ## Use TOML only (recommended) | | Issue | medium | ## Handle both URL formats | | Issue | high | ## Use GraphQL for all new code | | Issue | high | ## Use latest App Bridge via script tag | | Issue | high | ## Implement all GDPR handlers |
When to Use
This skill is applicable to execute the workflow or actions described in the overview.
Related Skills
bereniketech/anti-reversing-techniques
testing
VerifiedTrustedCommunity
AUTHORIZED USE ONLY: This skill contains dual-use security techniques. Before proceeding with any bypass or analysis: > 1.
SKILL.mdUpdated May 3, 2026
bereniketech/active-directory-attacks
testing
Community
Provide comprehensive techniques for attacking Microsoft Active Directory environments. Covers reconnaissance, credential harvesting, Kerberos attacks, lateral movement, privilege escalation, and domain dominance for red team operations and penetration testing.
SKILL.mdUpdated May 3, 2026
bereniketech/zeroize-audit
development
VerifiedTrustedCommunity
Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification. Use for auditing C/C++/Rust code handling secrets, keys, passwords, or other sensitive data.
SKILL.mdUpdated May 3, 2026
bereniketech/wcag-audit-patterns
development
VerifiedTrustedCommunity
Comprehensive guide to auditing web content against WCAG 2.2 guidelines with actionable remediation strategies.
SKILL.mdUpdated May 3, 2026