Perks
Shopify launches Shop MCP for agent search and Shop Pay checkout — image from Shopify
Image: Shopify

BriefsToolAvailable now1 min read

Shopify adds a security check command to its AI Toolkit

The new shopify app security check command scans a Shopify app for common vulnerabilities, and you can run it by asking a coding agent through Shopify AI Toolkit.

Summary

Shopify put a new command, shopify app security check, into its AI Toolkit and Shopify CLI. It scans an app for common vulnerabilities on your own machine, covering the codebase, extension configuration and dependencies. Every finding comes with the file and line, a severity and an example fix.

What changed

  • The new command, shopify app security check, is in Shopify AI Toolkit and Shopify CLI and supports public and custom apps.
  • It runs locally and looks at your codebase, extension point configuration and dependencies.
  • Each finding names the file and line, gives a severity, shows a code example for a fix and links to documentation.
  • To run it through a coding agent, ask: /shopify Check my app for common security vulnerabilities
  • The tool is open source. Shopify wants feedback in the Forum or on GitHub.

Availability

Available now

“Shopify AI Toolkit now includes shopify app security check , a security command that checks your app for common vulnerabilities before you ship.”

Founder takeaway

If you build or maintain a Shopify app, install the AI Toolkit and run the check before you ship, starting with the most severe findings. Shopify says a clean report is no guarantee, so keep your other tools and reviews.

Source

ShopifyBuild with confidence: Shopify AI Toolkit's security check - Shopify developer blog

Announced Checked

Researched and drafted with AI from the official sources above, then checked automatically before publishing. Spotted a mistake? Tell us.

SharePost on XLinkedIn

Related

More briefs

All briefs
  1. GitHub makes agentic autofix for code scanning alerts generally available — image from GitHub

    ToolAvailable now

    GitHub makes agentic autofix for code scanning alerts generally available

    GitHub's AI agent Copilot can now fix code scanning alerts, check the fix with CodeQL and open a draft pull request, for Enterprise Cloud customers with Code Security or Advanced Security.

    GitHub1 min read

  2. Black Forest Labs puts its FLUX.3 Image Klein AI model into Diffusers — image from Hugging Face

    ToolAvailable now

    Black Forest Labs puts its FLUX.3 Image Klein AI model into Diffusers

    FLUX.3 Image Klein, an AI image model, handles text-to-image, multi-reference editing and bounding-box placement. Two open checkpoints are out.

    Hugging Face1 min read

  3. Databricks launches Predictive AI Functions in Beta for SQL, Genie and dashboards — image from Databricks

    ToolBeta

    Databricks launches Predictive AI Functions in Beta for SQL, Genie and dashboards

    Databricks adds four new SQL AI functions and an upgraded ai_forecast so analysts can forecast, find drivers and flag anomalies without building models.

    Databricks1 min read

One email, every Monday

Briefs are published here every weekday. Monday Heist is the weekly email: one useful AI workflow, the files to use it, and the catch. Free, and you can leave in one click.

One email. Every Monday.