skills.rest
webdevarif
webdevarifCOMMUNITY
Explore all skills by this author →
Website𝕏@webdevarifGitHub

neuro-shopify-app-debug

Diagnoses Shopify app bugs and audits OAuth, webhooks, extensions, and billing against App Store review requirements.

Updated Apr 18, 2026
Search Tags:#debugging#oauth#graphql#qa checklist#webhooks#shopify#app store review
One-click install
npx skills add https://github.com/webdevarif/claude-skills --skill neuro-shopify-app-debug-webdevarif
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: neuro-shopify-app-debug
Source: https://github.com/webdevarif/claude-skills/tree/main/neuro-shopify-app-debug
Command: npx skills add https://github.com/webdevarif/claude-skills --skill neuro-shopify-app-debug-webdevarif

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Shopify apps frequently fail App Store review or break in production due to OAuth misconfigurations, unverified webhook HMAC signatures, missing GDPR handlers, GraphQL error handling gaps, and listing policy violations. This Skill provides a systematic 10-section debugging and QA checklist that finds bugs and rejection risks before Shopify's review team does. ## Core Features & Use Cases - Full-stack debugging workflow: Covers installation/OAuth, GraphQL API errors and rate limits, webhook HMAC verification and idempotency, checkout/theme/admin extensions, Billing API compliance, Polaris UI, performance, and security headers. - App Store rejection prevention: Audits listing name rules, screenshots, sensitive scope justification, GDPR webhooks (CUSTOMERS_DATA_REQUEST, CUSTOMERS_REDACT, SHOP_REDACT), and provides a rejection-to-fix mapping table. - Ready-to-use code patterns: Includes exponential backoff retry logic, HMAC verification with timingSafeEqual, idempotent webhook processing, and data reconciliation snippets. - Use Case: Before submitting a new public app, run the incognito QA checklist to catch console errors, verify session tokens replace third-party cookies, and confirm all three mandatory GDPR webhooks are implemented. ## Quick Start Ask the assistant to review your Shopify app codebase for App Store rejection risks and bugs using this debugging checklist.

Frequently Asked Questions about neuro-shopify-app-debug

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I debug Shopify app OAuth and installation errors?▼

Check that the redirect URI matches exactly in the Partner Dashboard, verify required scopes in shopify.app.toml, and use session tokens instead of third-party cookies. Clear stored sessions on APP_UNINSTALLED so reinstall triggers re-authentication.

How to verify Shopify webhook HMAC signatures?▼

Compute an HMAC-SHA256 of the raw request body using your SHOPIFY_API_SECRET, base64-encode it, and compare with the header using crypto.timingSafeEqual. Always verify before processing and respond within 300ms, queuing heavy work asynchronously.

What GDPR webhooks are mandatory for Shopify apps?▼

Three webhooks are mandatory: CUSTOMERS_DATA_REQUEST, CUSTOMERS_REDACT, and SHOP_REDACT. Missing any of them causes automatic App Store rejection. They must return customer data on request and delete personal data within the required timeframes.

Why does my Shopify GraphQL query return 200 but fail?▼

GraphQL returns HTTP 200 even for errors, so you must inspect the response body for an errors array and check userErrors in mutations. Common causes include malformed GIDs, THROTTLED rate limits, and missing access scopes.

Can new Shopify public apps use the REST Admin API?▼

No. Since April 2025, new public apps must use the GraphQL Admin API exclusively; REST is banned for them. Existing apps should migrate, and all apps should implement rate limit backoff using the extensions.cost throttle status.

What are common reasons Shopify rejects app submissions?▼

Common auto-reject reasons include third-party cookies in embedded apps, missing GDPR webhooks, off-platform billing, missing security headers, console errors during review, and using Shopify in the app name. The skill maps each rejection reason to its fix section.

Related Skills

Explore More Software Engineering Skills→
openaiopenai
5.3k

shopify-use-shopify-cli

Runs and troubleshoots Shopify CLI workflows for app config validation and store operations.

Official
Intermediate
sebc-devsebc-dev

capacitor-app-store

Guide developers through submitting Capacitor apps to the Apple App Store and Google Play Store.

Community
Intermediate
levanminhduclevanminhduc

shopify

Guide developers in building Shopify apps, extensions, themes, and API integrations.

Community
Advanced
d-oitd-oit
13

shell-script-quality

Lint shell scripts with ShellCheck and run BATS test suites.

Community
Intermediate