shopify-development

The shopify-development skill is a developer reference for building on the Shopify platform: apps, extensions, and themes using the GraphQL Admin API, the Shopify CLI, Polaris UI, and Liquid templating. It solves the problem of choosing the right build target and getting the correct, current API patterns, opening with a routing section that maps user intent (external integrations and merchant tools, checkout/admin/POS UI, or storefront design) to apps, extensions, or themes respectively.

It provides Shopify CLI commands for scaffolding and running apps, generating extension types (checkout UI, admin action/block, POS UI, functions), and theme development. GraphQL patterns for products, orders, and metafields are validated against API version 2026-01, and reference files add depth on app development, extensions, and themes. The app-development reference documents the OAuth 2.0 flow with explicit CSRF state verification, secure token exchange and storage, session tokens for embedded apps, webhook configuration including GDPR mandatory topics, and HMAC-SHA256 webhook signature verification. It includes bundled Python scripts (shopify_init.py, shopify_graphql.py) with tests and a requirements file. Credential handling follows standard practice: API keys and secrets are read from environment variables (SHOPIFY_API_KEY, SHOPIFY_API_SECRET), and the guidance emphasizes verifying webhook authenticity and preventing CSRF.

Target users are developers and agencies building Shopify apps, custom checkout and admin experiences, POS extensions, and themes. Use cases include standing up an OAuth-authenticated app, querying and mutating products and orders, setting metafields, wiring webhooks with signature verification, and implementing one-time or recurring billing.