All skills & plugins / Codex official plugins

Shopify

Shopify for ChatGPT makes store building and management as easy as having a conversation. Effortlessly connect your existing store or create a new online store by describing your business. Simply chat to add products, adjust inventory across locations, create discount codes, browse recent orders, view customer details, or pull analytics on your store’s performance.

Type: Plugin with 20 skills by Shopify
Catalog: Codex official plugins
Source: openai/plugins/plugins/shopify (106 files scanned)
Install and details: Agent Skills Index entry
License: not stated in the folder or manifest (the repository license may apply)
Signals: Remote MCP serverBundled scriptsNetwork calls in codeSpawns processes

Pre-approved tools

No allowed-tools or tools list in its SKILL.md, command or agent files, so the agent asks before using tools as usual.

Hooks

No hooks.

MCP servers and apps

Server	Where it runs	Credentials
shopify shopify/.mcp.json	Remote: `https://setup.shopify.com/mcp`	auth header or OAuth

Also ships 1 Codex app connector file (.app.json), which link a hosted app to your account.

Bundled code

27 code files (JavaScript):

Network calls

21 files with a network call pattern. First match per file:

plugins/shopify/skills/shopify-polaris-checkout-extensions/scripts/validate.mjs:1812
```
const response = await fetch(url.toString(), {
```
plugins/shopify/skills/shopify-polaris-checkout-extensions/scripts/search_docs.mjs:64
```
const response = await fetch(url.toString(), {
```
plugins/shopify/skills/shopify-pos-ui/scripts/validate.mjs:1812
```
const response = await fetch(url.toString(), {
```
plugins/shopify/skills/shopify-pos-ui/scripts/search_docs.mjs:64
```
const response = await fetch(url.toString(), {
```
plugins/shopify/skills/shopify-polaris-admin-extensions/scripts/validate.mjs:1812
```
const response = await fetch(url.toString(), {
```

Starts other programs

6 files. First match per file:

plugins/shopify/skills/shopify-polaris-checkout-extensions/scripts/validate.mjs:1209

while ((match = tagNameRegex.exec(content)) !== null || (match = bracketKeyRegex.exec(content)) !== null) {

plugins/shopify/skills/shopify-pos-ui/scripts/validate.mjs:1209

while ((match = tagNameRegex.exec(content)) !== null || (match = bracketKeyRegex.exec(content)) !== null) {

plugins/shopify/skills/shopify-polaris-admin-extensions/scripts/validate.mjs:1209

while ((match = tagNameRegex.exec(content)) !== null || (match = bracketKeyRegex.exec(content)) !== null) {

plugins/shopify/skills/shopify-polaris-customer-account-extensions/scripts/validate.mjs:1209

while ((match = tagNameRegex.exec(content)) !== null || (match = bracketKeyRegex.exec(content)) !== null) {

plugins/shopify/skills/shopify-polaris-app-home/scripts/validate.mjs:1209

while ((match = tagNameRegex.exec(content)) !== null || (match = bracketKeyRegex.exec(content)) !== null) {

Credentials referenced

No key, token or secret environment variable found in code or MCP config.

Static scan of commit 0722921 on 2026-10-27. Signals are patterns found in the files, not a verdict: a network call can be the whole point of a skill. Read the linked lines before you decide. How the scan works.