Merchant trust is everything Which means security is everything Introducing `app security check` A tool that finds common vulnerability patterns in Shopify apps Run it with AI Toolkit

Use it and send us your feedback /shopify Check my app for common security vulnerabilities

Should be a default step before every app goes live. Merchants never see the code, they just trust the install button

100% the way to think Security is tablestakes for merchants and apps

Good one from the merchant side too. Most stores I open have 15 apps installed and maybe 6 still in use, and every one of them keeps its read access to customers and orders. A check like this on the dev side plus a yearly app prune on the store side closes most of that door.

tysm for the feedback! We're cooking on a lot of stuff to help the merchant <> app experience.

please let it find the debug endpoint before a bored teenager does

noiceeee

A security check inside the AI Toolkit means it runs where the code gets written. Merchants notice trust before features

catching vulnerabilities before they become issues is key for merchant trust

Could have done this 2 months ago, I would be less token poor running security checks lol. Super cool, will take for a spin. If I get a perfect score, you add my app in the app store homepage, deal?

Great timing. The checkout hijacking is terrifying

This is exactly what I needed across my 7 Shopify apps. Merchants trust the install button, so I want this check in my workflow before every release. Running it today.

We actually covered the thinking behind why Shopify built this as a tool instead of a checklist.

given the recent hacks in the ecosystem, shouldn’t this be a much more alarming/revealing public post? lots of people still might not understand the whole picture

That's great

I have installed the AI Toolkit (claude plugin install shopify-ai-toolkit@claude-plugins-official) , but it says "/shopify" command not found...?

I love you!