Shopify
CommerceCommonly used with
Skills using Shopify (424)
blog-taxonomy
Extract, suggest, and sync tags and categories for blog posts across all major CMS platforms. Supports WordPress REST API, Shopify GraphQL, Ghost Content API, Strapi REST/GraphQL, and Sanity GROQ. Generates tag suggestions from content analysis (keyword frequency, heading extraction, semantic grouping), enforces minimum post-count thresholds to prevent thin tag archives, and syncs taxonomy via authenticated API calls. Use when user says "tags", "categories", "taxonomy", "tag suggestions", "sync tags", "WordPress tags", "Shopify tags".
brand-monitoring
Brand monitoring tool for tracking mentions across social media platforms. Monitor Reddit, Google News, YouTube, and DuckDuckGo for brand mentions. Includes sentiment analysis, trend tracking, crisis detection, and competitor comparison. No API key required for basic monitoring.
brand-protection-shopify
Shopify/DTC brand protection toolkit. Detect counterfeit stores, unauthorized resellers, and trademark violations. Includes DMCA takedown templates, domain monitoring, and social media infringement detection. No API key required.
brand-protection-tiktok
TikTok Shop brand protection toolkit. Detect unauthorized sellers, counterfeit products, and affiliate abuse. Includes TikTok IP Protection reporting, influencer misuse detection, and complaint templates. No API key required.
brand-protection-walmart
Walmart brand protection toolkit. Detect unauthorized sellers, counterfeits, and MAP violations. Includes Walmart Brand Portal reporting, WFS seller monitoring, and complaint templates. No API key required.
hunt-auth-bypass
Hunting skill for auth bypass vulnerabilities. Built from 12 public bug bounty reports across SAML XSW / parser-differential (GitHub Enterprise CVE-2025-25291/25292), SAML signature stripping (Uber, Rocket.Chat, samlify CVE-2025-47949), SAML domain enforcement bypass via control characters (HackerOne 2024), partner-portal cross-IdP assertion reuse (Slack), WordPress XMLRPC bypassing SSO (Uber), JWT alg-confusion HS256/RS256 (Jitsi), JWT signature-validation skip (Linktree, Newspack), and token-audience confusion (Argo CD CVE-2023-22482). For standalone JWT signature/crypto forging (alg:none, key confusion, kid/jku) see hunt-jwt-crypto; this skill covers JWT only inside SSO/SAML/token-trust bypass chains. SAML assertion-layer attacks (XSW, comment injection, signature stripping, XXE-in-assertion) are owned by hunt-saml; this skill owns the broader cross-protocol auth-bypass taxonomy. Use when hunting auth bypass — see the Legacy-Protocol Matrix for branded-UI vs legacy-endpoint patterns.
hunt-business-logic
Hunting skill for business logic vulnerabilities. Built from 12 public bug bounty reports. Covers coupon-race-stacking (Instacart, Stripe, Reverb), negative-quantity-in-cart price tampering (Upserve, Eternal/Zomato), decimal/fraction price-field overflow (Shipt), client-side checkout amount trust on PayPal redirect (WordPress.org), price-per-unit mass-assignment (Krisp), and archived-price swap / cart-TOCTOU (Stripe). Use when hunting business logic — heavy emphasis on financial-impact-demonstrated cases.
hunt-cache-poison
Hunting skill for cache poison vulnerabilities. Built from 10 public bug bounty reports including X-Forwarded-Host poisoning, X-HTTP-Method-Override / GCS cache, reflected→stored XSS via cache, classic Omer-Gil Web Cache Deception, Cloudflare Cache Deception Armor bypass, session-token cache deception, Akamai hop-by-hop smuggling → server-side edge poisoning, and Kettle's 2024 path-normalization WCD against Cloudflare/Fastly/GCP. Host/X-Forwarded-Host injection that reaches app logic (reset-link poisoning, routing SSRF, OAuth issuer) is owned by hunt-host-header; this skill owns the case where the poisoned response is CACHED and served to other users. Use when hunting cache poisoning, Web Cache Deception, CDN-fronted apps.
hunt-graphql
Hunting skill for graphql vulnerabilities. Built from 12 public bug bounty reports across IDOR via node() / GID, mutation IDOR including AI/LLM features, cross-tenant IDOR, SSRF via argument, batching-DoS, query-cost-bypass, SQLi via argument, broken-object-level-authz, auth-bypass via unscoped mutations, and PII exposure from missing field-level authz. Use when hunting graphql on any target.
hunt-idor
Hunting skill for idor vulnerabilities. Built from 26 public bug bounty reports. Use when hunting idor on any target.
hunt-misc
Hunting skill for misc vulnerabilities. Built from 225 public bug bounty reports. Use when hunting misc on any target.
ecommerce-seo
E-commerce SEO audit for online stores (WooCommerce, Shopify, Magento, custom). Covers the structural problems unique to commerce sites: category / product listing pages (PLP), product detail pages (PDP), faceted navigation and the crawl-budget / duplicate-content traps it creates, pagination, canonical handling for variants and filters, out-of-stock / discontinued product handling, internal linking and breadcrumbs, and Product / Offer / Review / AggregateRating / BreadcrumbList structured data for rich results. Use this skill whenever the user runs an online store and asks about e-commerce SEO, product page SEO, category page SEO, faceted navigation, filter URLs being indexed, product schema / rich results, out-of-stock SEO, or thin/duplicate product pages. Trigger on: "e-commerce SEO", "ecommerce SEO", "product page SEO", "category page SEO", "WooCommerce SEO", "Shopify SEO", "faceted navigation", "filter URLs in Google", "product schema", "rich snippets for products", "out of stock SEO", "duplicate product
ecommerce-seo
E-commerce SEO audit for online stores (WooCommerce, Shopify, Magento, custom). Covers the structural problems unique to commerce sites: category / product listing pages (PLP), product detail pages (PDP), faceted navigation and the crawl-budget / duplicate-content traps it creates, pagination, canonical handling for variants and filters, out-of-stock / discontinued product handling, internal linking and breadcrumbs, and Product / Offer / Review / AggregateRating / BreadcrumbList structured data for rich results. Use this skill whenever the user runs an online store and asks about e-commerce SEO, product page SEO, category page SEO, faceted navigation, filter URLs being indexed, product schema / rich results, out-of-stock SEO, or thin/duplicate product pages. Trigger on: "e-commerce SEO", "ecommerce SEO", "product page SEO", "category page SEO", "WooCommerce SEO", "Shopify SEO", "faceted navigation", "filter URLs in Google", "product schema", "rich snippets for products", "out of stock SEO", "duplicate product
appllama-design-skill
Build native-feeling, benchmark-quality mobile app screens (Expo / React Native). Use when designing or implementing any mobile UI — screens, flows, onboarding, paywalls, tab bars, settings, empty states — or when polishing motion, typography, dark mode, or perceived performance. Enforces Apple HIG fidelity, semantic colors, native controls, purposeful Reanimated motion, a simulator-verified iteration loop, and a study-real-apps-first workflow (pairs with the Appllama MCP). Trigger on "build a screen", "make this screen better", "design the onboarding", "polish the UI", "make it feel native", or any mobile design/implementation task.
boss
OPS on-demand: This skill should be used when the user asks to "/ops:boss", "boss mode", or "what needs…
flow
OPS on-demand: This skill should be used when the user asks to "/ops:flow", "dev lifecycle", or "where…
ops-accounts
OPS on-demand: This skill should be used when the user asks to "rotate accounts", "switch…
ops-ar
OPS on-demand: This skill should be used when the user asks to "A&R this track", "demo verdict", or…
ops-aws-audit
OPS on-demand: This skill should be used when the user asks to "audit AWS", "unused AWS resources", or…
ops-comms
OPS on-demand: This skill should be used when the user asks to "send a message"…
ops-competitors
OPS on-demand: This skill should be used when the user asks to "competitor intel", "what did they…
ops-credentials
OPS on-demand: This skill should be used when the user asks to "which keys are set", "missing…
ops-daemon
OPS on-demand: This skill should be used when the user asks to "daemon health", "background services…
ops-dash
OPS on-demand: This skill should be used when the user asks to "ops dashboard", "pixel HQ", or…
ops-deploy
OPS on-demand: This skill should be used when the user asks to "deploy status", "what is in…
ops-desktop
OPS on-demand: This skill should be used when the user asks to "control the desktop", "click on…
ops-doctor
OPS on-demand: This skill should be used when the user asks to "plugin broken", "ops doctor", or…
ops-ecom
OPS on-demand: This skill should be used when the user asks to "shopify", "orders inventory", or…
ops-feature-dev
OPS on-demand: This skill should be used when the user asks to "guided feature", "feature-dev", or…
ops-fires
OPS on-demand: This skill should be used when the user asks to "production fires", "what is on fire"…
ops-fleet
OPS on-demand: This skill should be used when the user asks to "fleet dashboard", "CLIProxy sessions"…
ops-go
OPS on-demand: This skill should be used when the user asks to "morning briefing", "/ops:ops-go", or…
ops-gtm
OPS on-demand: This skill should be used when the user asks to "go to market", "GTM plan", or…
ops-home
OPS on-demand: This skill should be used when the user asks to "homey", "smart home", or…
ops-humanizer
OPS on-demand: This skill should be used when the user asks to "humanize this", "this reads like…
ops-inbox
OPS on-demand: This skill should be used when the user asks to "check inbox", "inbox zero"…
ops-integrate
OPS on-demand: This skill should be used when the user asks to "add an API", "integrate SaaS", or…
ops-leadgen
OPS on-demand: This skill should be used when the user asks to "leadgen drafts", "cold email approve"…
ops-linear
OPS on-demand: This skill should be used when the user asks to "linear sprint", "create a ticket", or…
ops-mac
OPS on-demand: This skill should be used when the user asks to "mac is slow", "macos fix", or…
ops-marketing
OPS on-demand: This skill should be used when the user asks to "klaviyo", "ads spend", or…
ops-mcp
OPS on-demand: This skill should be used when the user asks to "MCP down", "reconnect MCP", or…
ops-merge
OPS on-demand: This skill should be used when the user asks to "merge PRs", "salvage branches", or…
ops-monitor
OPS on-demand: This skill should be used when the user asks to "datadog", "APM alerts", or…
ops-next
OPS on-demand: This skill should be used when the user asks to "what should I do next", "priority…
ops-orchestrate
OPS on-demand: This skill should be used when the user asks to "orchestrate projects", "dispatch…
ops-package
OPS on-demand: This skill should be used when the user asks to "ship a parcel", "print a label", or…
ops-pocket
OPS on-demand: This skill should be used when the user asks to "pocket memos", "voice memo pipeline"…
ops-projects
OPS on-demand: This skill should be used when the user asks to "portfolio dashboard", "gsd projects"…
ops-recap
OPS on-demand: This skill should be used when the user asks to "recap daemon", "tmux marquee", or…
ops-release
OPS on-demand: This skill should be used when the user asks to "release the plugin", "publish ops…
ops-revenue
OPS on-demand: This skill should be used when the user asks to "burn rate", "runway", or…
ops-secret-sync
OPS on-demand: This skill should be used when the user asks to "doppler github secrets", "secret…
ops-settings
OPS on-demand: This skill should be used when the user asks to "update credentials", "ops settings", or…
ops-ship
OPS on-demand: This skill should be used when the user asks to "ship ops plugin", "merge all PRs and…
ops-social-planner
OPS on-demand: This skill should be used when the user asks to "content calendar", "what is scheduled"…
ops-socials
OPS on-demand: This skill should be used when the user asks to "tweet", "post to linkedin", or…
ops-speedup
Cross-platform, hardware-adaptive system optimizer. Auto-detects macOS / Linux / WSL / Windows (MINGW/Cygwin/MSYS2) and CPU/RAM/disk/GPU profile, then picks the right cleanup strategy. Scans reclaimable disk space, memory pressure, runaway processes, startup bloat, network issues. CleanMyMac built into Claude Code.
ops-status
Lightweight green/red status panel for every configured integration. No gather, no actions.
brand-protection-amazon
Amazon brand protection toolkit. Detect hijackers, counterfeits, and unauthorized sellers. Includes MAP violation monitoring, trademark abuse detection, complaint templates for Brand Registry, and test buy evidence collection guides. No API key required.
brand-protection-ebay
eBay brand protection toolkit. Detect unauthorized sellers, counterfeits, and VeRO violations. Includes price monitoring, trademark abuse detection, VeRO complaint templates, and enforcement guides. No API key required.
competitor-price-analysis
Competitor pricing strategy analysis and market positioning. Price mapping, pricing gaps identification, elasticity signals evaluation, and strategic pricing optimization. Use when the user asks about competitor pricing, price analysis, pricing strategy, or competitive pricing research.
competitor-price-tracker
Set up competitor price tracking and monitoring workflows. Track price changes, detect promotions, analyze pricing patterns, and get alerts for competitive price movements.
cross-border-ecommerce
Cross-border e-commerce expansion advisor. Scores target markets on 8 weighted dimensions (market size, ecommerce penetration, competition, regulatory complexity, logistics infrastructure, payment ecosystem, cultural distance, IP protection), compares 5 fulfillment models with cost and transit data, provides country-by-country tax/duty compliance guides (EU VAT/IOSS, UK VAT, US sales tax, CA GST, AU GST, JP consumption tax), maps local payment preferences by market, and builds a phased expansion roadmap. No API key required.
dropshipping-product-research
Product research for dropshipping businesses. Identify profitable products with reliable suppliers, healthy margins, and manageable competition. Evaluates shipping times, return risk, and marketing viability.
ecommerce-branding
Build and strengthen your e-commerce brand identity. Brand positioning, messaging, visual identity guidelines, and brand consistency across sales channels and marketing touchpoints.
ecommerce-business-plan
Create a comprehensive e-commerce business plan. Market analysis, financial projections, marketing strategy, operations planning, and milestone roadmap for new or growing e-commerce businesses.
ecommerce-competitor-analysis
Cross-platform ecommerce competitor analysis and strategic intelligence. Multi-channel presence evaluation, strategy assessment, positioning analysis, and competitive benchmarking. Use when the user asks about competitor analysis, competitive research, market analysis, or competitive intelligence across platforms.
ecommerce-content-marketing
E-commerce content marketing strategy planner. Generates content calendars, topic ideas, and platform-specific strategies by analyzing customer reviews, trends, competitor content, and SEO opportunities. Two modes: (A) Build — create a full content strategy from scratch, (B) Audit — analyze existing content and find gaps. Supports TikTok, Instagram, YouTube, Pinterest, blog/SEO, and Amazon A+. No API key required. Use when: (1) planning content for a new product launch, (2) building a content calendar, (3) finding viral content ideas, (4) analyzing competitor content strategies, (5) extracting customer pain points for content topics.
ecommerce-email-marketing-builder
E-commerce email marketing system builder. Creates complete email automation flows with full copywriting, subject lines, ESP setup instructions, segmentation rules, and annual campaign calendars. Generates copy-paste-ready email sequences for Klaviyo, Omnisend, Mailchimp, or any ESP. Covers welcome series, cart abandonment, browse abandonment, post-purchase, review requests, cross-sell, win-back, VIP/loyalty, replenishment, and sunset flows. Includes A/B test subject line variants, send timing, trigger conditions, branching logic, and seasonal campaign calendar. No API key required. Use when: (1) setting up email marketing for an e-commerce store, (2) writing email sequences and flows, (3) planning seasonal email campaigns.
ecommerce-growth-strategy
E-commerce growth strategy advisor. Diagnoses current business health using unit economics (CAC, LTV, AOV, contribution margin), identifies the highest-impact growth opportunities across 5 levers (traffic, conversion, AOV, retention, expansion), and builds a prioritized 90-day growth roadmap. Uses the Ansoff Matrix adapted for e-commerce to evaluate market penetration, channel expansion, product expansion, and new market entry. Includes multichannel readiness assessment (Amazon, Walmart, TikTok Shop, Etsy, DTC/Shopify/Shopify) and product line expansion analysis. No API key required. Use when: (1) planning next phase of e-commerce growth, (2) deciding whether to expand to new channels or products, (3) diagnosing why growth has stalled, (4) prioritizing what to fix or build next.
ecommerce-keyword-research
Cross-platform keyword research for e-commerce. Discover high-converting keywords across Amazon, Shopify, Etsy, Google Shopping, TikTok Shop, and Walmart. Analyzes search volume signals, competition indicators, commercial intent, and long-tail opportunities.
ecommerce-landing-page
Audit and optimize e-commerce landing pages for conversion. CTA placement, trust signals, page structure, copy optimization, and A/B testing strategy for product pages, collection pages, and campaign landing pages.
ecommerce-marketing-strategy-builder
Full-stack e-commerce marketing strategy builder. Analyzes your product, market, and competitors, then builds a complete omnichannel marketing plan covering paid ads, SEO, email/SMS, content marketing, social media, influencer partnerships, and referral programs. Includes target audience persona, competitive landscape, channel prioritization with budget allocation, content direction, and a 90-day action plan. Works for any e-commerce platform — Shopify, Amazon, Etsy, WooCommerce, TikTok Shop, and more. No API key required.
ecommerce-personalization
Design personalization strategies for e-commerce stores. Product recommendations, dynamic content, customer segmentation, and personalized email/SMS based on browsing and purchase behavior.
ecommerce-ppc-strategy-planner
Cross-platform PPC strategy planner for ecommerce businesses. Analyzes your product and margins, recommends the right advertising platforms (Google Ads, Meta Ads, TikTok Ads), calculates ROAS targets, allocates budget across channels, and generates platform-specific campaign briefs with ad copy and creative direction. Two modes: (A) Build — design a multi-platform ad strategy from scratch, (B) Optimize — audit existing cross-platform campaigns and reallocate budget. Works for Shopify, WooCommerce, standalone stores, and marketplace sellers expanding to external traffic. No API key required.
ecommerce-shipping-rates
Compare and optimize shipping rates across carriers and fulfillment methods. UPS, FedEx, USPS, DHL rate comparison, zone optimization, and shipping strategy to maximize margins.
ecommerce-social-media-marketing
Social media marketing strategy for ecommerce brands. Content calendar planning, platform-specific strategies, social commerce optimization, influencer collaboration, and community building. Use when the user asks about social media marketing, social commerce, content strategy, or social media for ecommerce.
app-builder
App scaffolding: Next.js, Vite, Nuxt, Astro, FastAPI, Django, Laravel, RN, Flutter. Triggers: scaffold, bootstrap, new project, starter, dashboard, mobile app.
ecommerce-patterns
E-commerce: cart, checkout, payments (Stripe/Adyen), order state, inventory, promos, tax. Triggers: cart, checkout, SKU, payment, Stripe, Shopify, Medusa, Magento, coupon, refund.
ops-rotate
OPS on-demand: This skill should be used when the user asks to "rotate Claude", "max seats", or…
ops-rotate-setup
OPS on-demand: This skill should be used when the user asks to "rotate setup", "enroll Claude seat", or…
etsy-advertising
Etsy Ads strategy — budget allocation, bid management, promoted listings, offsite ads opt-out analysis
etsy-competitor-analysis
Competitor research — pricing comparison, bestseller analysis, differentiation strategy
etsy-custom-orders
Custom order management — communication templates, pricing, delivery timelines, return policies
etsy-digital-products
Digital product creation and selling — templates, printables, planners, digital art, delivery setup
etsy-keyword-research
Etsy search optimization — long-tail keywords, tag research, competitor analysis, seasonal trends
etsy-listing-photography
Product photography for Etsy — composition, lighting, backgrounds, editing, lifestyle shots, 360 views
etsy-multi-shop
Multi-shop management — category separation, brand differentiation, efficiency optimization
etsy-offsite-ads
Offsite Ads analysis — when to opt out, ROI tracking, fee impact on margins, attribution
copywriting-hooks
Generate opening hooks and post titles for long-form articles in EN or FR — blog posts, Substack/Medium/dev.to, LinkedIn long-form, paid newsletters, opinion essays, reported features, technical deep-dives. Trigger whenever the user asks for a hook, opening, lede, intro, first sentence/paragraph, opener, accroche, attaque, phrase d'accroche, or première phrase — including making a flat intro punchier or rewriting a draft opening. Also trigger when user asks for a post title, titre d'article, headline, or when ghostwriting skills reach the opening or titling step. Proposes 3-4 hooks pulling distinct psychological levers (curiosity gap, contrarian, scene, promise, authority), 2 candidates each, waits for the user to pick. Do NOT trigger for social posts (LinkedIn feed, Twitter/X, TikTok, Bluesky, Threads), READMEs or doc first lines, taglines, email subjects or openers, ad copy (Google/Meta Ads), landing-page headlines, press releases, SEO meta, fiction openings, talk/podcast/video script intros, or body rewrit
steve-chou-mwqhj-perspective
Steve Chou (My Wife Quit Her Job) 视角. 美国独立站 + 跨境老兵的长期主义方法论. 调用此 skill 时, 用 Steve 的认知框架做 DTC / 多平台决策.
commerce-ugc-prompts
Generate review + photo + video prompts at the right post-delivery moment by product type. Inputs: product type (consumable / durable / cosmetic / apparel), platform. Output: prompt-timing recommendation (D+3 / D+7 / D+14 by category), template copy, incentive structure (compliant with platform anti-incentive rules), photo-prompt CTA. Trigger phrases: 'review prompt', 'UGC prompt', 'ask for a photo review', 'request video testimonial', '/commerce ugc-prompts <product-type>'.
ops-deploy-fix
OPS on-demand: This skill should be used when the user asks to "deploy auto-fix", "failed deploy", or…
ops-desk
OPS on-demand: This skill should be used when the user asks to "desk sweep", "open decisions", or…
ops-resume
OPS on-demand: This skill should be used when the user asks to "resume sessions", "reopen ghostty…
ops-rules
OPS on-demand: This skill should be used when running any ops skill, or when the user asks to "ops…
offensive-dependency-confusion
Deep-dive offensive methodology for dependency confusion and namespace attacks across all major package ecosystems. Covers npm scope confusion exploiting the gap between public and private scoped packages and .npmrc misconfigurations where registry mappings fail to pin internal scopes exclusively. Addresses PyPI namespace attacks through --extra-index-url resolution ordering, NuGet feed priority exploitation when multiple package sources are configured without clear directives, Maven and Gradle repository ordering where artifact resolution traverses repositories sequentially, Go module proxy abuse through GOPROXY misconfiguration, Ruby gems namespace squatting, and Docker image tag confusion with unqualified image references. Provides complete proof-of-concept methodology using safe callbacks including DNS canary via interactsh or Burp Collaborator and HTTP beacon with no destructive payload. Covers reconnaissance techniques for discovering internal package names through GitHub repository analysis, error mess
migration-ready-schema
Data-model rules that make a schema importable from day one, so the migration-import-engineer is never blocked on missing columns. Every SMB Product-Builder product must let a customer bring their data from an incumbent (ServiceTitan/Toast/Mindbody/Shopify) — that requires provenance (source_ref) and rollback (import_batch_id) on importable entities, and modelling real-world actors as entities rather than inline fields. Applied by architect when writing the data model in ARCH-{slug}.md, and checked by migration-import-engineer. One cheap rule set prevents the migration↔architecture seam gap from recurring across all 40 products.
vertical-onboarding
Onboarding-and-switching playbook for SMB Product-Builder products. Defines the first-run experience that turns a prospect leaving an incumbent (ServiceTitan/Toast/Mindbody/Shopify/QuickBooks) into an activated user — import-first onboarding, the activation milestone, sample-data fallback, and the time-to-first-value target. Applied by migration-import-engineer and architect/pm so onboarding is designed as a funnel, not an afterthought. Our whole wedge is "low switching cost"; this skill makes that real on day one.
Showing top 100 of 424 skills using Shopify by quality score.
See all 424 skills via search →Integration detected automatically from skill content. Some results may be false positives.