Skill UI

This skill guides developers and SaaS founders on minimizing operational costs when building on the Shopify platform. It covers deep dives into Shopify store plan rate limits, optimizing GraphQL and REST API usage, implementing robust cost tracking mechanisms, and applying advanced strategies like caching and bulk operations to reduce billable expenditures.

A comprehensive guide for developers building apps on Shopify, focusing on mandatory privacy compliance (GDPR/CCPA). Learn how to correctly manage sensitive customer PII, implement critical privacy webhooks (data request, redaction), enforce data minimization principles, and establish robust data retention policies required for App Store submission and legal compliance.

This skill guides the implementation of enterprise-grade Role-Based Access Control (RBAC) for Shopify Plus applications. It covers integrating fine-grained staff permissions, managing multi-location inventory access, and utilizing the Shopify Organization API for centralized multi-store governance. This is essential for building complex, secure SaaS solutions that require granular, per-staff, and organization-wide permission management.

This guide details how to implement robust and secure authentication for Shopify applications using the official @shopify/shopify-api SDK. It covers three main authentication methods: OAuth flow for public apps, session token exchange for embedded apps, and private access for custom apps. Use this skill when setting up, connecting, or debugging any application that requires deep integration and secure API access to Shopify's admin or storefront data.

A comprehensive guide detailing the 10 most common anti-patterns and mistakes when developing apps for the Shopify platform. Covers critical topics including mandatory GraphQL usage, handling userErrors, GDPR compliance, webhook timeouts, and secure API practices. Essential for code audits and App Store preparation.

This guide details how to configure Shopify applications across isolated Development, Staging, and Production environments. It establishes separate app instances, API credentials, and stores for each environment, ensuring secure, structured deployments and preventing cross-environment data leakage. Essential for professional SaaS development workflows.

Implement comprehensive automated policy enforcement for Shopify apps, ensuring security and adherence to App Store guidelines. This skill includes ESLint rules for detecting hardcoded API secrets, enforcing GraphQL query cost budgets, and running pre-commit hooks and CI checks for critical compliance validations (e.g., GDPR webhooks). Use it when hardening a production-ready Shopify application.

A comprehensive checklist for deploying Shopify apps to production or submitting to the App Store. It covers critical areas including API versioning, mandatory GDPR compliance webhooks, webhook security best practices, rate limit resilience, and App Store listing requirements. Use this guide when preparing for a major launch or auditing existing compliance gaps to ensure maximum stability and security.

A comprehensive guide to registering, handling, and managing Shopify webhooks and events for e-commerce applications. Learn how to use GraphQL to subscribe to critical topics (orders, products, etc.), implement robust HMAC verification, and, crucially, configure mandatory GDPR compliance handlers required for successful Shopify App Store submission. Covers event handler patterns and API management.

This catalog provides a comprehensive set of foundational abstractions for building robust, scalable applications. It includes standardized interfaces for interacting with AI models, managing key-value data stores, publishing domain events, structured logging, and handling build parameters. Developers can rely on these abstractions to ensure modularity and consistency across different service layers.

This API provides key-value store abstractions, enabling developers to manage persistent or temporary data within their web services. It offers two distinct scopes: a global (non-tenant-scoped) store and a tenant-scoped store. This is essential for applications requiring structured data management, such as application settings, caching mechanisms, or session data, while maintaining clear data isolation.

This skill provides a comprehensive solution for monitoring brand impersonation attacks across multiple digital vectors. It systematically scans domains, social media platforms, mobile app stores, and the dark web to detect phishing campaigns, typosquatting, and unauthorized brand usage. It is essential for security teams conducting proactive threat intelligence gathering and vulnerability assessments to safeguard brand integrity.