The Agent Skills Directory

[SAFE]: The skill follows security best practices by explicitly instructing against hardcoding Shopify API secrets and keys, recommending the use of environment variables instead.
[SAFE]: Includes mandatory patterns for HMAC signature verification using the official authenticate.webhook() method to ensure webhook integrity.
[SAFE]: Addresses performance and stability by recommending asynchronous processing for webhooks to avoid timeouts and implementing exponential backoff for API rate limit (429) handling.
[SAFE]: Correctly identifies and mandates the implementation of GDPR-required webhooks (data request, redact) for App Store compliance.
[SAFE]: Uses standard, well-known Shopify developer tools and libraries (e.g., Shopify CLI, Polaris, App Bridge) from the official @shopify namespace.

shopify-apps