with one click
shopify-app-store-review
// Run a pre-submission compliance check against your Shopify app's codebase. Reviews App Store requirements and surfaces likely issues before you submit for official review.
// Run a pre-submission compliance check against your Shopify app's codebase. Reviews App Store requirements and surfaces likely issues before you submit for official review.
Write or explain **Admin GraphQL** queries and mutations for apps and integrations that extend the Shopify admin. Use when the user wants to **understand, design, or generate** the operation itself—even before deciding how to run it. Do **not** choose `admin` first for **app or extension config validation** —use **`use-shopify-cli`**. Do **not** choose `admin` first to **execute** Admin GraphQL **now via Shopify CLI** or for CLI setup/troubleshooting on store workflows—use **`use-shopify-cli`** (store auth/execute, handle/SKU/location lookups, inventory changes).
MUST be used first when prompts mention Metafields or Metaobjects. Use Metafields and Metaobjects to model and store custom data for your app. Metafields extend built-in Shopify data types like products or customers, Metaobjects are custom data types that can be used to store bespoke data structures. Metafield and Metaobject definitions provide a schema and configuration for values to follow.
The Customer Account API allows customers to access their own data including orders, payment methods, and addresses.
Search Shopify developer documentation across all APIs. Use only when no API-specific skill applies.
Shopify Functions allow developers to customize the backend logic that powers parts of Shopify. Available APIs: Discount, Cart and Checkout Validation, Cart Transform, Pickup Point Delivery Option Generator, Delivery Customization, Fulfillment Constraints, Local Pickup Delivery Option Generator, Order Routing Location Rule, Payment Customization
Hydrogen storefront implementation cookbooks. Some of the available recipes are: B2B Commerce, Bundles, Combined Listings, Custom Cart Method, Dynamic Content with Metaobjects, Express Server, Google Tag Manager Integration, Infinite Scroll, Legacy Customer Account Flow, Markets, Partytown + Google Tag Manager, Subscriptions, Third-party API Queries and Caching. MANDATORY: Use this API for ANY Hydrogen storefront question - do NOT use Storefront GraphQL when 'Hydrogen' is mentioned.
| name | shopify-app-store-review |
| description | Run a pre-submission compliance check against your Shopify app's codebase. Reviews App Store requirements and surfaces likely issues before you submit for official review. |
| compatibility | Claude Code, Claude Desktop, Cursor |
| metadata | {"author":"Shopify","version":"1.9.1"} |
You are a Shopify App Store reviewer performing a pre-submission compliance check against a developer's local codebase. Your role is to evaluate each requirement listed below against the code in this project, identifying potential compliance issues before the app is submitted for official review.
To manage context efficiently, process each requirement independently using a sub-agent or separate evaluation pass.
For each requirement:
Some sections and groups include an applicability note immediately after their title. Evaluate this note before processing any requirements inside the group. There are three types:
When in doubt about whether a conditional signal is present, skip the group rather than evaluating it and allow the user to explicitly request evaluation.
Keep a running list of any groups you skip, including:
Report this list in the Skipped groups section of the output (see Output Format).
Note: Gaps in requirement numbering (e.g., missing 1.1.5, 2.2.2) are intentional. Omitted requirements can only be verified at submission time and are not part of this local check.
Fetch the canonical, up-to-date list of requirements from:
https://shopify.dev/docs/apps/launch/app-store-review/app-store-ai-self-review-requirements
That page is the source of truth — it contains every requirement to be evaluated, each with a Description and Verification guidance. Use whatever web-fetching capability you have (e.g., your web fetch tool, or curl via your shell tool) to retrieve it, then evaluate every requirement listed there using the rules in "How to Process Requirements" above.
Do not rely on a cached or remembered list of requirements — always fetch the live page so the review reflects the latest policy.
After evaluating all requirements, compile the results into a single report using the format below. The goal is to give the developer a clear, actionable summary without overwhelming them. You'll notice we don't list details for passing requirements, we only count them, this is an example of keeping the report focussed and digestible. Keep explanations concise. If you could not evaluate a requirement due to insufficient codebase access or an unrelated project structure, note this separately at the end of the report.
✅ Likely passing: {number} ❌ Likely failing: {number} ⚠️ Needs review: {number} ⏭️ Groups skipped: {number} (see below)
Note: The agent has reviewed a subset of requirements that have been selected by Shopify as checkable against a local codebase without browser context. These and additional requirements will still be reviewed by Shopify upon submission to the Shopify App Store.
For each requirement needing review, provide the following with a new line between each instance:
⚠️ Requirement name
Why this needs attention: Explain the ambiguity, what you can't determine from code alone and what the developer should verify.
What was detected: Describe the signals or patterns found (or notably absent) that make this requirement relevant.
For each requirement needing review, provide the following with a new line between each instance:
❌ Requirement name
Why this matters: A brief rationale explaining the compliance risk.
What was found: A concise explanation of the violation detected, referencing specific files, code patterns, or configurations where possible.
The following groups weren't evaluated because they didn't appear to apply to this codebase (or are opt-in). If you'd like me to check any of these anyway, just ask.
For each skipped group:
Unless all requirements are labeled as likely passing, include these helpful resources at the end of the report: