メニュー
Get started building on Shopify. Use when a developer asks to build an app, build a theme, create a dev store, set up a partner account, scaffold a project, or get started developing for Shopify. NOT for merchants managing stores.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Use when the user supplies or imports existing security findings, vulnerability reports, or security/vulnerability Jira/Linear tickets from scanners, advisories, GitHub, Atlassian Rovo, Linear, or similar backlog sources and wants static repo-impact triage. Do not use for discovery, duplicate-bug triage, validation, or fixes.
Boltz CLI setup and auth. Use when installing, updating, verifying, or authenticating `boltz-api`, or fixing missing CLI, PATH, sandbox, browser login, or auth errors.
Design new protein binders with Boltz. Use when generating protein, peptide, antibody, nanobody, or custom binder candidates for a target. Not for screening existing proteins or small molecules.
Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide or scoped-path Codex Security scan. Run repeated independent discovery passes over one resolved scope with worker-specific threat models, semantically merge candidates, synthesize one canonical validation threat model, then run validation, attack-path analysis, canonical JSON completion, and generated reporting once. Do not use for PRs, commits, branch diffs, or working-tree diffs.
Use when Codex is already in the finding-discovery phase of a security scan or the user explicitly asks to discover candidate security findings in a repository or code change. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.
Use when the user explicitly asks to fix and verify a validated or plausible security finding. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.
| name | shopify-onboarding-dev |
| description | Get started building on Shopify. Use when a developer asks to build an app, build a theme, create a dev store, set up a partner account, scaffold a project, or get started developing for Shopify. NOT for merchants managing stores. |
| compatibility | Claude Code, Claude Desktop, Cursor |
| metadata | {"author":"Shopify","version":"1.9.1"} |
Silently identify the client from system context:
| Signal | Client |
|---|---|
| "Claude Code" | claude-code |
| "Cursor" | cursor |
| "VSCode" / "Visual Studio Code" | vscode |
| "Gemini CLI" | gemini-cli |
| Unrecognized | other |
If genuinely uncertain about client, ask. Never guess.
Check if Shopify CLI is installed by running shopify version.
If the CLI is present and the AI toolkit plugin is already available,
skip to Step 3.
Shopify CLI — if not found, install using your package manager (npm, pnpm, yarn, and bun all work):
npm install -g @shopify/cli@latest
If no Node package manager is available, use Homebrew (macOS only):
brew tap shopify/shopify && brew install shopify-cli
Verify with shopify version before continuing.
AI toolkit plugin/extension — install for the detected client:
| Client | Install command |
|---|---|
claude-code | /plugin marketplace add Shopify/shopify-ai-toolkit then /plugin install shopify-plugin@shopify-ai-toolkit |
cursor | /add-plugin and search for "Shopify", or visit cursor.com/marketplace/shopify |
vscode | Command Palette (Cmd+Shift+P) → Chat: Install Plugin From Source → paste https://github.com/Shopify/Shopify-AI-Toolkit |
gemini-cli | gemini extensions install https://github.com/Shopify/shopify-ai-toolkit (run in terminal, not inside CLI) |
other | Not supported — inform the user and stop |
If install fails, report the exact error and stop.
Confirm what was installed in one sentence. If the developer hasn't mentioned a specific goal yet, ask:
"What would you like to build?
- An app for Shopify
- A theme for Shopify
Or if you need a developer account first, create one free at dev.shopify.com/dashboard."
From here, let the developer's request flow to the appropriate
API-specific skill (e.g. shopify-admin, shopify-liquid,
shopify-functions). Do not duplicate their routing logic.