security-review

Analyze Go and Shopify applications for security vulnerabilities and remediation.

Updated Aug 27, 2026

Search Tags:#security #vulnerability #Go #Shopify #best-practices #JWT #webhooks

Ready to run

npx skills add https://github.com/TatTran22/claude-code-shopify --skill security-review-tattran22

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/TatTran22/claude-code-shopify/tree/main/skills/security-review
Command: npx skills add https://github.com/TatTran22/claude-code-shopify --skill security-review-tattran22

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps Go developers rigorously assess and enforce security best practices in Shopify apps, reducing vulnerabilities in authentication, input handling, secrets management, webhooks, and data handling.

Core Features & Use Cases

Comprehensive security checklist for Go + Shopify applications, covering auth, input validation, secret management, webhook safety, and GDPR considerations.
Reusable patterns and guidelines for implementing HMAC verification, password hashing with bcrypt, and safe error logging.
Use Case: A developer reviews an existing Fiber-based API and a Shopify OAuth flow, applies the checklist, and produces actionable remediation tasks and code examples.

Quick Start

Run the security-review skill against your Go + Shopify project to generate a remediation plan and a compliance checklist.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I verify Shopify webhooks and secure OAuth flows in Go?▼

Verify Shopify webhooks and OAuth flows in Go by implementing HMAC verification for incoming requests and enforcing safe authentication practices. This skill analyzes your application to identify missing checks and provides remediation patterns for secure webhook handling and authentication.

What security best practices should I follow for a Fiber-based Go API?▼

Security best practices for a Fiber-based Go API include using parameterized queries, bcrypt password hashing, safe error handling, and secure logging. This skill reviews your API against these standards to ensure secrets management and input handling reduce vulnerabilities.

Does this security review support Go applications built with the Fiber framework?▼

Yes, this security review supports Go applications built with the Fiber framework. It applies specifically to Fiber-based APIs, Shopify OAuth flows, and webhook handlers to guide developers through end-to-end security remediation and best practice enforcement.

How do I check my Shopify app for GDPR compliance and secrets management vulnerabilities?▼

To check your Shopify app for GDPR compliance and secrets management vulnerabilities, run a security review against your codebase. This skill assesses data handling layers and secret management practices to produce an actionable remediation plan and compliance checklist.

What is the best way to enforce bcrypt password hashing and safe error handling in Go?▼

The best way to enforce bcrypt password hashing and safe error handling in Go is to apply reusable security patterns during code review. This skill provides guidelines for implementing bcrypt hashing and safe logging to prevent sensitive data exposure in error messages.