Skill UI

A comprehensive guide to building robust, production-ready applications using the Apify SDK and apify-client in TypeScript. Covers advanced topics like standardized client singleton patterns, selecting the right Crawlee crawler (Cheerio, Playwright, Puppeteer), implementing robust Actor lifecycles, and managing dataset/key-value store operations.

This tool provides comprehensive audits for App Store and Google Play listings. It analyzes metadata, visual assets, and user ratings against current ASO best practices. By fetching live data and assessing brand maturity, it generates a prioritized, actionable plan to boost app visibility, improve conversion rates, and enhance overall store ranking.

A comprehensive checklist and methodology for penetration testing file upload endpoints. Covers critical vulnerabilities such as MIME type bypass, extension bypass, magic byte manipulation, path traversal, and stored XSS. Essential for web application security assessment and bug bounty hunting, guiding testers through basic testing to advanced exploitation techniques like Null Byte injection and double extensions.

A comprehensive checklist and methodology for testing Cross-Site Scripting (XSS) vulnerabilities. Covers all major types, including Stored, Reflected, DOM, and Blind XSS, along with advanced techniques like CSP bypass, polyglot payloads, and event handler injection. Essential for web application security testing and bug bounty hunting to identify and mitigate malicious script injection risks.

This guide helps developers choose the optimal architecture pattern for building on Shopify. It compares four validated variants: Embedded Remix App (for admin tools), Headless Storefront (for custom e-commerce experiences using Hydrogen), Backend Integration (for system syncing like ERP), and Theme App Extension (for storefront widgets). Use this resource when starting a new Shopify project to determine the correct development path and technology stack.

This skill guides developers and SaaS founders on minimizing operational costs when building on the Shopify platform. It covers deep dives into Shopify store plan rate limits, optimizing GraphQL and REST API usage, implementing robust cost tracking mechanisms, and applying advanced strategies like caching and bulk operations to reduce billable expenditures.

A comprehensive guide for developers building apps on Shopify, focusing on mandatory privacy compliance (GDPR/CCPA). Learn how to correctly manage sensitive customer PII, implement critical privacy webhooks (data request, redaction), enforce data minimization principles, and establish robust data retention policies required for App Store submission and legal compliance.

This skill guides the implementation of enterprise-grade Role-Based Access Control (RBAC) for Shopify Plus applications. It covers integrating fine-grained staff permissions, managing multi-location inventory access, and utilizing the Shopify Organization API for centralized multi-store governance. This is essential for building complex, secure SaaS solutions that require granular, per-staff, and organization-wide permission management.

This guide details how to implement robust and secure authentication for Shopify applications using the official @shopify/shopify-api SDK. It covers three main authentication methods: OAuth flow for public apps, session token exchange for embedded apps, and private access for custom apps. Use this skill when setting up, connecting, or debugging any application that requires deep integration and secure API access to Shopify's admin or storefront data.

A comprehensive guide detailing the 10 most common anti-patterns and mistakes when developing apps for the Shopify platform. Covers critical topics including mandatory GraphQL usage, handling userErrors, GDPR compliance, webhook timeouts, and secure API practices. Essential for code audits and App Store preparation.

This guide details how to configure Shopify applications across isolated Development, Staging, and Production environments. It establishes separate app instances, API credentials, and stores for each environment, ensuring secure, structured deployments and preventing cross-environment data leakage. Essential for professional SaaS development workflows.

Implement comprehensive automated policy enforcement for Shopify apps, ensuring security and adherence to App Store guidelines. This skill includes ESLint rules for detecting hardcoded API secrets, enforcing GraphQL query cost budgets, and running pre-commit hooks and CI checks for critical compliance validations (e.g., GDPR webhooks). Use it when hardening a production-ready Shopify application.