[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"extension-plugin-shopify-shopify-plugin-pl":3,"guides-for-shopify-shopify-plugin":271,"similar-k174qq1maz54dvvs62qzc6k9ah866vzr":272},{"_creationTime":4,"_id":5,"children":6,"community":7,"display":9,"evaluation":25,"identity":215,"isFallback":219,"parentExtension":220,"providers":248,"relations":251,"repo":252,"workflow":270},1778054222661.7778,"k174qq1maz54dvvs62qzc6k9ah866vzr",[],{"reviewCount":8},0,{"description":10,"installMethods":11,"name":12,"sourceUrl":13,"tags":14},"Search Shopify docs, generate and validate GraphQL, Liquid, and UI extension code",{},"Shopify Dev MCP","https://github.com/shopify/shopify-ai-toolkit",[15,16,17,18,19,20,21,22,23,24],"shopify","mcp","graphql","liquid","storefront","admin-api","cli","development","ui-extensions","functions",{"_creationTime":26,"_id":27,"extensionId":5,"locale":28,"result":29,"trustSignals":204,"workflow":213},1778054237067.5288,"kn7bknxjh9rw98hr2c0h78wwcs866h88","en",{"checks":30,"evaluatedAt":194,"extensionSummary":195,"promptVersionExtension":196,"promptVersionScoring":197,"rationale":198,"score":199,"summary":200,"tags":201,"targetMarket":202,"tier":203},[31,36,39,42,46,49,53,58,61,64,68,73,76,80,83,86,89,92,95,98,102,106,110,114,118,121,124,127,131,134,137,140,143,146,149,152,155,158,161,164,167,170,173,176,180,183,186,190],{"category":32,"check":33,"severity":34,"summary":35},"Practical Utility","Problem relevance","pass","The description clearly outlines a problem relevant to Shopify developers: needing to search docs, generate code, and validate it.",{"category":32,"check":37,"severity":34,"summary":38},"Unique selling proposition","The extension provides specific capabilities beyond a simple LLM wrapper, offering tools for GraphQL, Liquid, and UI extension code validation and generation tailored for Shopify.",{"category":32,"check":40,"severity":34,"summary":41},"Production readiness","The bundle includes multiple skills covering Shopify documentation search, GraphQL/Liquid/UI extension code generation and validation, indicating a good coverage of its stated use cases.",{"category":43,"check":44,"severity":34,"summary":45},"Scope","Single responsibility principle","The extension focuses on Shopify development tools, covering documentation, code generation, and validation for GraphQL, Liquid, and UI extensions, which is a coherent set of related capabilities.",{"category":43,"check":47,"severity":34,"summary":48},"Description quality","The description is concise, readable, and accurately reflects the capabilities of the extension as seen in the provided manifests and skill files.",{"category":50,"check":51,"severity":34,"summary":52},"Invocation","Scoped tools","The skills appear to be narrowly scoped, focusing on specific Shopify-related tasks like searching documentation or validating specific code types (GraphQL, Liquid, UI extensions), rather than generic shell execution.",{"category":54,"check":55,"severity":56,"summary":57},"Documentation","Configuration & parameter reference","not_applicable","No explicit configuration options or parameters were evident that require documentation or precedence rules beyond the standard tool usage.",{"category":43,"check":59,"severity":34,"summary":60},"Tool naming","The identified tools (skills like `shopify-admin`, `shopify-liquid`, etc.) have descriptive and understandable names relevant to the Shopify domain.",{"category":43,"check":62,"severity":34,"summary":63},"Minimal I/O surface","The skills appear to have well-defined inputs and outputs related to Shopify development tasks, with validation scripts suggesting structured data handling.",{"category":65,"check":66,"severity":34,"summary":67},"License","License usability","The extension is licensed under MIT, a permissive open-source license, and this is clearly indicated in multiple manifest files and the LICENSE file.",{"category":69,"check":70,"severity":71,"summary":72},"Maintenance","Commit recency","warning","No recent commits were found on the default branch (pushedAt: n/a), indicating potential lack of maintenance.",{"category":69,"check":74,"severity":56,"summary":75},"Dependency Management","No third-party dependencies requiring explicit management or vulnerability checks were identified in the provided package.json files.",{"category":77,"check":78,"severity":34,"summary":79},"Security","Secret Management","No secrets are directly used or handled by the skills/plugins in a way that would require special management beyond standard tool execution.",{"category":77,"check":81,"severity":34,"summary":82},"Injection","The validation scripts (`scripts/search_docs.mjs`, `scripts/validate.mjs`) are executed with specific parameters and do not appear to load or execute arbitrary third-party data as instructions.",{"category":77,"check":84,"severity":34,"summary":85},"Transitive Supply-Chain Grenades","The extension appears to bundle necessary scripts and does not fetch remote code or data at runtime for core functionality, keeping the audit boundary intact.",{"category":77,"check":87,"severity":34,"summary":88},"Sandbox Isolation","The extension's operations are confined to executing defined scripts and interacting with Shopify APIs, with no indications of modifying files outside its intended scope or project folder.",{"category":77,"check":90,"severity":34,"summary":91},"Sandbox escape primitives","No evidence of detached process spawns, retry loops around denied calls, or background child processes that could lead to sandbox escapes was found.",{"category":77,"check":93,"severity":34,"summary":94},"Data Exfiltration","No imperative instructions for reading and submitting confidential data to third parties were detected, and outbound calls are not evident in the provided manifests.",{"category":77,"check":96,"severity":34,"summary":97},"Hidden Text Tricks","The bundled manifest and skill files do not contain hidden text, control characters, or other obfuscation techniques that could steer the model.",{"category":99,"check":100,"severity":34,"summary":101},"Hooks","Opaque code execution","The bundled scripts are standard JavaScript/TypeScript and do not appear to use obfuscation techniques like base64 encoding or runtime fetching for execution.",{"category":103,"check":104,"severity":34,"summary":105},"Portability","Structural Assumption","The skills appear to be self-contained or rely on standard CLI commands, with no apparent assumptions about specific user project layouts outside the bundle.",{"category":107,"check":108,"severity":56,"summary":109},"Trust","Issues Attention","No GitHub issues data was provided for evaluation.",{"category":111,"check":112,"severity":34,"summary":113},"Versioning","Release Management","A clear version signal is present in multiple manifests (`version: 1.2.1`) and the CHANGELOG.md file, indicating a managed release process.",{"category":115,"check":116,"severity":34,"summary":117},"Code Execution","Validation","The presence of validation scripts (`scripts/validate.mjs`) for GraphQL, Liquid, and UI extensions suggests a strong emphasis on input validation and sanitization.",{"category":77,"check":119,"severity":34,"summary":120},"Unguarded Destructive Operations","The extension focuses on development tools and API interactions, with no identified destructive operations that would require additional confirmation guards.",{"category":115,"check":122,"severity":34,"summary":123},"Error Handling","The validation scripts include error handling and reporting mechanisms, and the skills' structure implies well-defined interactions rather than silent failures.",{"category":115,"check":125,"severity":34,"summary":126},"Logging","While not explicitly detailed in the provided manifests, the usage of validation scripts and external tool calls suggests standard logging practices are likely followed.",{"category":128,"check":129,"severity":34,"summary":130},"Compliance","GDPR","The extension interacts with Shopify APIs and documentation, not directly with personal user data in a way that would typically trigger GDPR concerns.",{"category":128,"check":132,"severity":34,"summary":133},"Target market","The extension is focused on Shopify development workflows, which are globally applicable to Shopify merchants and developers, hence the target market is global.",{"category":103,"check":135,"severity":34,"summary":136},"Runtime stability","The extension relies on standard Node.js and Shopify CLI, which are generally cross-platform, and the scripts appear to be portable.",{"category":43,"check":138,"severity":34,"summary":139},"Tool surface size","The extension exposes multiple skills for different Shopify APIs (Admin, Liquid, Functions, etc.), covering a broad but coherent set of development tasks.",{"category":50,"check":141,"severity":34,"summary":142},"Name collisions","Each skill (e.g., `shopify-admin`, `shopify-liquid`) has a distinct name and purpose, preventing ambiguity in routing.",{"category":50,"check":144,"severity":34,"summary":145},"Overlapping near-synonym tools","The distinct skill names for different Shopify APIs and tools prevent near-synonym overlaps and disambiguation issues.",{"category":50,"check":147,"severity":56,"summary":148},"Hooks-off mechanism","The extension does not appear to implement any hooks that would require a hooks-off mechanism.",{"category":50,"check":150,"severity":56,"summary":151},"Hook matcher tightness","No hooks were detected in the provided files.",{"category":77,"check":153,"severity":56,"summary":154},"Hook security","No hooks were detected that would require security checks.",{"category":99,"check":156,"severity":56,"summary":157},"Silent prompt rewriting","No UserPromptSubmit hooks were detected.",{"category":77,"check":159,"severity":56,"summary":160},"Permission Hook","No PermissionRequest hooks were detected.",{"category":128,"check":162,"severity":56,"summary":163},"Hook privacy","No hooks were detected that would involve logging or telemetry.",{"category":115,"check":165,"severity":56,"summary":166},"Hook dependency","No hooks were detected that would have external dependencies.",{"category":54,"check":168,"severity":34,"summary":169},"Install / Setup Instructions","The README provides clear installation instructions for multiple platforms (Claude Code, Cursor, Gemini CLI, OpenAI Codex, VS Code) and mentions other install methods.",{"category":54,"check":171,"severity":34,"summary":172},"Feature Transparency","The README and skill descriptions clearly outline the features, including search, code generation, and validation for various Shopify APIs.",{"category":54,"check":174,"severity":34,"summary":175},"Phantom features","All features mentioned in the README (docs search, code validation, store management, auto-updates) appear to have corresponding implementations or are clearly tied to the provided skills.",{"category":177,"check":178,"severity":34,"summary":179},"Convention","Layout convention adherence","The plugin structure appears to follow conventions, with manifests in `.claude-plugin/` and skills in a `skills/` directory, and no `bin/` entries are mentioned as undocumented.",{"category":177,"check":181,"severity":56,"summary":182},"Plugin state","No persistent plugin state that would need to live under `${CLAUDE_PLUGIN_DATA}` was identified.",{"category":77,"check":184,"severity":56,"summary":185},"Keychain-stored secrets","The extension does not appear to handle secrets that would require keychain storage; operations interact with Shopify APIs via standard authentication mechanisms (likely through the CLI).",{"category":187,"check":188,"severity":34,"summary":189},"Dependencies","Tagged release sourcing","The bundled skills appear to be sourced from within the repository and do not indicate reliance on external MCP servers with unpinned references.",{"category":191,"check":192,"severity":34,"summary":193},"Installation","Clean uninstall","The extension's installation and operation rely on Shopify CLI and Node.js, which manage their own lifecycle; no background daemons or persistent services are spawned by the extension itself.",1778054235228,"This plugin provides access to Shopify's documentation, generates and validates GraphQL queries, Liquid templates, and UI extensions, and supports store management through Shopify CLI capabilities. It aims to streamline app and theme development workflows.","2.0.0","3.4.0","The extension is well-documented, covers a relevant set of Shopify development tasks with distinct skills, and utilizes Shopify CLI for its operations. It adheres to good practices regarding code validation and security. The only minor concern is the lack of recent commit activity, but this does not detract from its current production readiness.",95,"A comprehensive Shopify development toolkit providing documentation search, code generation, and validation for various Shopify APIs and extensions.",[15,16,17,18,19,20,21,22,23,24],"global","verified",{"codeQuality":205,"collectedAt":206,"documentation":207,"maintenance":209,"security":210,"testCoverage":212},{},1778054224404,{"descriptionLength":208,"readmeSize":8},81,{},{"hasNpmPackage":211,"smitheryVerified":211},false,{"hasCi":211,"hasTests":211},{"updatedAt":214},1778054237067,{"githubOwner":15,"githubRepo":216,"locale":28,"slug":217,"type":218},"shopify-ai-toolkit","shopify-plugin","plugin",true,{"_creationTime":221,"_id":222,"community":223,"display":224,"identity":232,"parentExtension":234,"providers":235,"relations":243,"workflow":245},1778054222661.7773,"k178jnaay3bb5nqvf4bwhqmjy1867ggc",{"reviewCount":8},{"description":225,"installMethods":226,"name":227,"sourceUrl":13,"tags":228},"Shopify developer tools for Claude Code",{},"Shopify Dev MCP - AI Agent Plugin",[15,229,230,231,17,18,21],"developer-tools","code-generation","documentation",{"githubOwner":15,"githubRepo":216,"locale":28,"slug":216,"type":233},"marketplace",null,{"extract":236,"llm":241},{"commitSha":237,"license":238,"marketplace":239},"c5c18d86ce7b2a7ca51ebac7c4b1a4eda00c8e25","MIT",{"name":216,"pluginCount":240},1,{"promptVersionExtension":196,"promptVersionScoring":197,"score":242,"targetMarket":202,"tier":203},99,{"repoId":244},"kd75w0snk32w940qd2f4a8t251865m9q",{"anyEnrichmentAt":246,"extractAt":247,"githubAt":246,"llmAt":214,"updatedAt":214},1778054223010,1778054222661,{"extract":249,"llm":250},{"commitSha":237,"license":238},{"promptVersionExtension":196,"promptVersionScoring":197,"score":199,"targetMarket":202,"tier":203},{"parentExtensionId":222,"repoId":244},{"_creationTime":253,"_id":244,"identity":254,"providers":255,"workflow":267},1777995558409.8657,{"githubOwner":15,"githubRepo":216,"sourceUrl":13},{"discover":256,"github":259},{"sources":257},[258],"skills-sh",{"closedIssues90d":8,"forks":260,"license":238,"openIssues90d":261,"pushedAt":262,"readmeSize":263,"stars":264,"topics":265},24,8,1777664222000,1877,286,[266],"gemini-cli-extension",{"discoverAt":268,"extractAt":269,"githubAt":269,"updatedAt":269},1777995558409,1778054223439,{"anyEnrichmentAt":246,"extractAt":247,"githubAt":246,"llmAt":214,"updatedAt":214},[],[273,307,338,361],{"_creationTime":274,"_id":275,"community":276,"display":277,"identity":289,"providers":293,"relations":299,"workflow":302},1778054452948.4272,"k179khyq4dvq0ytvdcepec984d8666wk",{"reviewCount":8},{"description":278,"name":279,"sourceUrl":280,"tags":281},"Comprehensive toolkit for developing Claude Code plugins. Includes 7 expert skills covering hooks, MCP integration, commands, agents, and best practices. AI-assisted plugin creation and validation.","Plugin Development Toolkit","https://github.com/anthropics/claude-plugins-official/tree/HEAD/plugins/plugin-dev",[22,282,283,284,285,16,21,286,287,288],"plugin-creation","hooks","agents","skills","automation","guidance","best-practices",{"githubOwner":290,"githubRepo":291,"locale":28,"slug":292,"type":218},"anthropics","claude-plugins-official","plugin-dev",{"extract":294,"llm":297,"smithery":298},{"commitSha":295,"license":296},"06f52cd3ac3e47ecb45228a86183ea2a86e9d6ff","Apache-2.0",{"promptVersionExtension":196,"promptVersionScoring":197,"score":242,"targetMarket":202,"tier":203},{"qualityScore":8,"totalActivations":8,"uniqueUsers":8,"useCount":8,"verified":211},{"parentExtensionId":300,"repoId":301},"k171b9714j6pgfxqht22y94q4x866sck","kd798hf3w99qz2xt1fqtgq7gf9865e31",{"anyEnrichmentAt":303,"extractAt":304,"githubAt":305,"llmAt":306,"smitheryAt":303,"updatedAt":306},1778054509977,1778054452948,1778054454391,1778054703946,{"_creationTime":308,"_id":309,"community":310,"display":311,"identity":322,"providers":326,"relations":331,"workflow":334},1778053849885.8894,"k17924fbebyf7jxdk33aa7b6hn8664ng",{"reviewCount":8},{"description":312,"installMethods":313,"name":314,"sourceUrl":315,"tags":316},"Liquid language fundamentals, CSS/JS/HTML coding standards, and WCAG accessibility patterns for Shopify themes",{},"Shopify Liquid Theme Skills","https://github.com/benjaminsehl/liquid-skills",[15,18,317,22,318,319,320,321],"theme","accessibility","css","javascript","html",{"githubOwner":323,"githubRepo":324,"locale":28,"slug":325,"type":218},"benjaminsehl","liquid-skills","shopify-theme-skills",{"extract":327,"llm":329},{"commitSha":328,"license":56},"d35cf8314c0618a6cc4e7e61c664156cb9e29884",{"promptVersionExtension":196,"promptVersionScoring":197,"score":330,"targetMarket":202,"tier":203},96,{"parentExtensionId":332,"repoId":333},"k170xanfh7j73ktj5g4s4m39z1866xz8","kd78664p5jsspj88chqvjxbjvd865sbe",{"anyEnrichmentAt":335,"extractAt":336,"githubAt":335,"llmAt":337,"updatedAt":337},1778053850271,1778053849885,1778053870270,{"_creationTime":339,"_id":340,"community":341,"display":342,"identity":352,"providers":354,"relations":359,"workflow":360},1778054452948.4253,"k1767a8yk98h8qcz0rkh7t64an867zws",{"reviewCount":8},{"description":343,"installMethods":344,"name":345,"sourceUrl":346,"tags":347},"Skills for designing and building MCP servers that work seamlessly with Claude. Guides you through deployment models (remote HTTP, MCPB, local), tool design patterns, auth, and interactive MCP apps.",{},"MCP Server Development Suite","https://github.com/anthropics/claude-plugins-official/tree/HEAD/plugins/mcp-server-dev",[16,348,22,349,350,231,351,218],"server","typescript","python","security",{"githubOwner":290,"githubRepo":291,"locale":28,"slug":353,"type":218},"mcp-server-dev",{"extract":355,"llm":356,"smithery":358},{"commitSha":295,"license":296},{"promptVersionExtension":196,"promptVersionScoring":197,"score":357,"targetMarket":202,"tier":203},98,{"qualityScore":8,"totalActivations":8,"uniqueUsers":8,"useCount":8,"verified":211},{"parentExtensionId":300,"repoId":301},{"anyEnrichmentAt":303,"extractAt":304,"githubAt":305,"llmAt":306,"smitheryAt":303,"updatedAt":306},{"_creationTime":362,"_id":363,"community":364,"display":365,"identity":374,"providers":376,"relations":380,"workflow":381},1778054452948.4097,"k17awzvhhaeaj8jcsnx8bcvgyd866nq9",{"reviewCount":8},{"description":366,"installMethods":367,"name":368,"sourceUrl":369,"tags":370},"Development kit for working with the Claude Agent SDK",{},"Agent SDK Development Plugin","https://github.com/anthropics/claude-plugins-official/tree/HEAD/plugins/agent-sdk-dev",[371,22,349,350,372,21,373],"sdk","agent","verification",{"githubOwner":290,"githubRepo":291,"locale":28,"slug":375,"type":218},"agent-sdk-dev",{"extract":377,"llm":378,"smithery":379},{"commitSha":295,"license":296},{"promptVersionExtension":196,"promptVersionScoring":197,"score":357,"targetMarket":202,"tier":203},{"qualityScore":8,"totalActivations":8,"uniqueUsers":8,"useCount":8,"verified":211},{"parentExtensionId":300,"repoId":301},{"anyEnrichmentAt":303,"extractAt":304,"githubAt":305,"llmAt":306,"smitheryAt":303,"updatedAt":306}]