shopify-apps

Guide Shopify app development with Remix, App Bridge, and Polaris patterns.

Updated Jan 12, 2026
One-click install
npx skills add https://github.com/giosuetedeschi-spec/bobu-website --skill shopify-apps-giosuetedeschi-spec
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: shopify-apps
Source: https://github.com/giosuetedeschi-spec/bobu-website/tree/main/.claude/skills/shopify-apps
Command: npx skills add https://github.com/giosuetedeschi-spec/bobu-website --skill shopify-apps-giosuetedeschi-spec

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the complexity of building robust, secure, and performant Shopify applications by providing standardized architectural patterns and avoiding common pitfalls.

Core Features & Use Cases

  • Modern Architecture: Guidance on implementing Remix/React Router setups and embedded App Bridge interfaces.
  • Security & Integration: Best practices for secure webhook handling with HMAC verification and GraphQL Admin API usage.
  • Use Case: Use this skill when you are architecting a new Shopify app and need to ensure your webhook processing is asynchronous or when you need to verify the correct implementation of Polaris components.

Quick Start

Ask the shopify-apps skill to explain the recommended pattern for implementing secure webhook verification in a new Remix-based application.

Frequently Asked Questions about shopify-apps

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement secure webhook verification in a Shopify Remix application?

Secure webhook verification in a Shopify Remix app requires HMAC validation to ensure payload integrity. You must verify the HMAC signature against your app's secret key before processing the webhook to prevent unauthorized requests.

What is the recommended architecture for building embedded Shopify apps with App Bridge?

Embedded Shopify apps use App Bridge to integrate seamlessly within the Shopify admin using Remix and React Router. This architecture ensures secure session management and native UI rendering through Polaris components.

How does asynchronous webhook processing work with the GraphQL Admin API?

Asynchronous webhook processing decouples webhook reception from GraphQL Admin API execution, preventing timeout errors. You verify the webhook, queue the task, and process the GraphQL mutations separately to maintain performance.

Can I use Polaris components with React Router for Shopify app development?

Yes, Polaris components integrate with React Router to build Shopify embedded app interfaces. They ensure your UI complies with Shopify design standards and functions correctly within the App Bridge environment.

What's the best way to structure GraphQL API communication in a Shopify app?

Structuring GraphQL API communication involves using the Shopify Admin API client within Remix loaders and actions. This ensures authenticated queries and mutations while maintaining Shopify performance and security compliance.

Why do Shopify webhooks fail HMAC verification in my Remix app?

Shopify webhook HMAC verification fails when the raw request body is altered before signing or the wrong secret is used. You must process the exact raw payload and compare the computed HMAC digest against the request headers.