shopify-onboarding-dev

Get started building on Shopify.

What this skill does for you

Get started building on Shopify. Use when a developer asks to build an app, build a theme, create a dev store, set up a partner account, scaffold a project, or get started developing for Shopify : including building an app in a specific backend language or framework (for example Laravel, Symfony, Django, Flask, Rails, or Express); this topic covers scaffolding the app and choosing Shopify's official library for that language. When the prompt also involves an extension surface (checkout, admin, POS, customer accounts), learn this topic **in addition to** the surface topic. NOT for merchants managing stores.

Quoted from the skill description in the pinned source

Who made it

Publishershopify

Repositoryshopify-ai-toolkit

Installs9,400as of Sep 27, 2026

Use it with Edge

Bring this skill into your Edge workflow. Read the pinned instructions to check its setup.

Use it with Edge Read skill source

Security evidence

3 static scans, 0 counted findings. What this means: the listed scanners recorded the results shown for this package revision.

Scanner	Date	Result
Edge static checks	2026-09-27	Pass
Cisco skill-scanner	2026-09-27	Pass
Semgrep Edge rules	2026-09-27	Pass

Static scans check the code, not how well the skill works.

Scanner scope, raw findings and mirrored provider records

Socket (skills.sh mirror): Version unavailable. Scope: Not supplied by the mirrored record. Revision: not supplied. Raw findings: not supplied. Counted findings: Not supplied.

Snyk (skills.sh mirror): Version unavailable. Scope: Not supplied by the mirrored record. Revision: not supplied. Raw findings: not supplied. Counted findings: Not supplied.

Edge static checks (Edge-run): edge-static/1.0.1. Scope: Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence. Revision: 3e8a074fba02d9b95086ad505f8cbe0020ffeb9a. Raw findings: . Counted findings: .

Cisco skill-scanner (Edge-run): cisco-skill-scanner/2.1.0. Scope: Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis. Revision: 3e8a074fba02d9b95086ad505f8cbe0020ffeb9a. Raw findings: 1. Counted findings: .

Semgrep Edge rules (Edge-run): semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1. Scope: Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded. Revision: 3e8a074fba02d9b95086ad505f8cbe0020ffeb9a. Raw findings: . Counted findings: .

Source and licence

Repository: https://github.com/shopify/shopify-ai-toolkit
Pinned skill file: View source at revision
Revision: 3e8a074fba02d9b95086ad505f8cbe0020ffeb9a
Package hash: sha256:c8ff8fba67e3ca58cd1e78fdc3c73c91fb35857cf814ef830b6c49231526c776
Licence: MIT