Communityコーディング&開発github.com

shopify/shopify-app-store-review

Shopifyアプリのコードベースに対して、提出前のコンプライアンスチェックを実行します。App Storeの要件をレビューし、公式レビューに提出する前に問題の可能性を表面化します。

shopify-app-store-review とは?

このスキルは、Shopifyアプリの開発者がApp Storeに提出する前に、コードベースのコンプライアンスチェックを自動化するためのものです。Shopifyが公開しているApp Storeの要件(例:スコープの最小化、データのプライバシー、Graphics APIの使用など)に基づいて、アプリケーションが潜在的に問題を抱える箇所を特定します。これにより、公式のアプリレビュープロセスで却下されるリスクを低減し、開発サイクルを短縮できます。主にShopify CLIやCLI互換の開発環境(例:Terminal)で動作し、コードをスキャンして所定のルールセットと照合します。スキルのドキュメント(SKILL.md)には、チェック項目の定義方法や拡張方法が記載されており、開発者はカスタムルールを追加することも可能です。

対応~Claude Code~Codex CLI~Cursor
npx skills add https://github.com/shopify/shopify-ai-toolkit/tree/main/skills/shopify-app-store-review

Installed? Explore more コーディング&開発 skills: steipete/bluebubbles, steipete/eightctl, steipete/blucli · View all 6 →

お気に入りのAIに質問する

このエージェントスキルを事前に読み込んだ状態で新しいチャットを開きます。

ドキュメント

shopify-app-store-review は何をしますか?

Shopifyアプリのコードベースに対して、提出前のコンプライアンスチェックを実行します。App Storeの要件をレビューし、公式レビューに提出する前に問題の可能性を表面化します。

概要

このスキルは、ShopifyアプリがApp Storeに提出される前に、主要なコンプライアンス要件を満たしていることを確認するのに役立ちます。コードベースをスキャンし、一般的な問題(例:未承認のAPI使用、プライバシーポリシーの欠如、不適切なスコープ設定など)を特定します。

使用方法

  1. スキルをShopifyアプリのプロジェクトディレクトリに配置します。
  2. 次のコマンドを実行してチェックを開始します:
    shopify app review
    
  3. 出力を確認し、特定された問題を修正します。

要件

  • Shopify CLIがインストールされていること。
  • アプリがShopifyパートナーアカウントに登録されていること。
  • コードベースが最新のShopify App Storeポリシーに準拠していること。

カスタムルール

独自のコンプライアンスルールを追加するには、.shopify/review-rulesディレクトリにYAMLファイルを作成します。各ルールは次の構造に従います:

rules:
  - id: custom-rule-1
    description: "カスタムルールの説明"
    severity: error
    pattern: "チェックするパターン"
    message: "ルール違反時のメッセージ"

出力例

Checking your app for compliance...
✓ プライバシーポリシーが設定されています
✓ スコープが必要最小限に設定されています
✗ 未承認のAPIエンドポイントが検出されました: /api/v1/unauthorized
→ 修正方法: 該当エンドポイントを削除するか、Shopifyに承認依頼を提出してください

トラブルシューティング

  • チェックが実行されない: Shopify CLIが最新バージョンであることを確認してください。
  • 誤検知が発生する: カスタムルールを調整するか、問題を報告してください。
  • ルールの追加方法: 上記のカスタムルールセクションを参照してください。

Individual skills in this repo

This repo contains 20 individual skills — each has its own dedicated page.

shopify/shopify-admin

Write or explain **Admin GraphQL** queries and mutations for apps and integrations that extend the Shopify admin. Use when the user wants to **understand, design, or generate** the operation itself—even before deciding how to run it. Do **not** choose `admin` first for **app or extension config validation** —use **`use-shopify-cli`**. Do **not** choose `admin` first to **execute** Admin GraphQL **now via Shopify CLI** or for CLI setup/troubleshooting on store workflows—use **`use-shopify-cli`** (store auth/execute, handle/SKU/location lookups, inventory changes).

shopify/shopify-admin-execution

Run a validated Admin GraphQL operation against a specific store using Shopify CLI. Use this when the user wants an executable store workflow, not just the query or mutation text. If the answer should include `shopify store auth` and `shopify store execute`, choose this API. Choose this for 'my store', 'this store', a store domain, product reads on a merchant store, low-inventory lookups, product updates, and warehouse/location inventory changes. Examples: 'Show me the first 10 products on my store', 'Find products with low inventory on my store', 'Set inventory at the Toronto warehouse so SKU ABC-123 is 12'.

shopify/shopify-custom-data

MUST be used first when prompts mention Metafields or Metaobjects. Use Metafields and Metaobjects to model and store custom data for your app. Metafields extend built-in Shopify data types like products or customers, Metaobjects are custom data types that can be used to store bespoke data structures. Metafield and Metaobject definitions provide a schema and configuration for values to follow.

shopify/shopify-customer

The Customer Account API allows customers to access their own data including orders, payment methods, and addresses.

shopify/shopify-dev

Search Shopify developer documentation across all APIs. Use only when no API-specific skill applies.

shopify/shopify-functions

Shopify Functions allow developers to customize the backend logic that powers parts of Shopify. Available APIs: Discount, Cart and Checkout Validation, Cart Transform, Pickup Point Delivery Option Generator, Delivery Customization, Fulfillment Constraints, Local Pickup Delivery Option Generator, Order Routing Location Rule, Payment Customization

shopify/shopify-hydrogen

Hydrogen storefront implementation cookbooks. Some of the available recipes are: B2B Commerce, Bundles, Combined Listings, Custom Cart Method, Dynamic Content with Metaobjects, Express Server, Google Tag Manager Integration, Infinite Scroll, Legacy Customer Account Flow, Markets, Partytown + Google Tag Manager, Subscriptions, Third-party API Queries and Caching. MANDATORY: Use this API for ANY Hydrogen storefront question - do NOT use Storefront GraphQL when 'Hydrogen' is mentioned.

shopify/shopify-liquid

Liquid is an open-source templating language created by Shopify. It is the backbone of Shopify themes and is used to load dynamic content on storefronts. Keywords: liquid, theme, shopify-theme, liquid-component, liquid-block, liquid-section, liquid-snippet, liquid-schemas, shopify-theme-schemas

shopify/shopify-onboarding-dev

Get started building on Shopify. Use when a developer asks to build an app, build a theme, create a dev store, set up a partner account, scaffold a project, or get started developing for Shopify. NOT for merchants managing stores.

shopify/shopify-onboarding-merchant

Set up and connect a Shopify store from your AI assistant. Use when the user wants to: set up my Shopify store, connect my store, install Shopify plugin, get started with Shopify, manage my store, add products to my store, merchant onboarding, start selling online, Shopify setup help, create my first store, how do I set up an online store, import products, migrate from Square, migrate from WooCommerce, migrate from Etsy, migrate from Amazon, migrate from eBay, migrate from Wix, import from Google Merchant Center, migrate from Clover, migrate from Lightspeed, move products to Shopify, import catalog, replatform to Shopify. This is for store owners — not developers.

shopify/shopify-partner

The Partner API lets you programmatically access data about your Partner Dashboard, including your apps, themes, and affiliate referrals.

shopify/shopify-payments-apps

The Payments Apps API enables payment providers to integrate their payment solutions with Shopify's checkout.

shopify/shopify-polaris-admin-extensions

Add custom actions and blocks from your app at contextually relevant spots throughout the Shopify Admin. Admin UI Extensions also supports scaffolding new adminextensions using Shopify CLI commands.

shopify/shopify-polaris-app-home

Build your app's primary user interface embedded in the Shopify admin. If the prompt just mentions `Polaris` and you can't tell based off of the context what API they meant, assume they meant this API.

shopify/shopify-polaris-checkout-extensions

Build custom functionality that merchants can install at defined points in the checkout flow, including product information, shipping, payment, order summary, and Shop Pay. Checkout UI Extensions also supports scaffolding new checkout extensions using Shopify CLI commands.

shopify/shopify-polaris-customer-account-extensions

Build custom functionality that merchants can install at defined points on the Order index, Order status, and Profile pages in customer accounts. Customer Account UI Extensions also supports scaffolding new customer account extensions using Shopify CLI commands.

shopify/shopify-pos-ui

Build retail point-of-sale applications using Shopify's POS UI components. These components provide a consistent and familiar interface for POS applications. POS UI Extensions also supports scaffolding new POS extensions using Shopify CLI commands. Keywords: POS, Retail, smart grid

shopify/shopify-storefront-graphql

Use for custom storefronts requiring direct GraphQL queries/mutations for data fetching and cart operations. Choose this when you need full control over data fetching and rendering your own UI. NOT for Web Components - if the prompt mentions HTML tags like <shopify-store>, <shopify-cart>, use storefront-web-components instead.

shopify/shopify-use-shopify-cli

Choose when the user needs **Shopify CLI** to run or fix something now: validate app or extension config on disk (`shopify.app.toml`, `shopify.app.<name>.toml`, `shopify.extension.toml`); run or troubleshoot store workflows (`shopify store auth`, `shopify store execute`); inventory or product changes by handle, SKU, or location name; or CLI setup, auth, upgrade issues. Emphasize **commands and operational steps**, not only authoring GraphQL. Skip for API-only understanding or codegen with no CLI execution. Examples: validate configuration before deploy; run an existing query via CLI; list products; missing `shopify store execute`.

shopify/ucp

Use when the user wants to use the UCP CLI to find, compare, buy, or track products from online merchants, or to set up and troubleshoot the local UCP profile required for merchant-scoped operations. Covers global catalog search ("find me X under $Y"), named-merchant transactions ("buy this from Z.com"), order tracking, `ucp profile init`, `ucp doctor`, carts, checkout, orders, and UCP setup/help. Falls back to merchant-hosted handoff when direct in-protocol checkout isn't available.

関連スキル