Receive and verify Shopify webhooks. Use when setting up Shopify webhook handlers, debugging signature verification, or handling store events like orders/create, products/update, or customers/create.
92
88%
Does it follow best practices?
Impact
100%
1.35xAverage score across 3 eval scenarios
Advisory
Suggest reviewing before use
Express webhook signature verification
Raw body middleware
26%
100%
Base64 digest encoding
100%
100%
Timing-safe comparison
100%
100%
Parse after verify
20%
100%
Reject invalid signature
100%
100%
HMAC SHA-256 algorithm
100%
100%
Correct HMAC header
100%
100%
SHOPIFY_API_SECRET env var
0%
100%
Attribution comment
0%
100%
200 OK on success
100%
100%
Python FastAPI webhook handler
hmac.compare_digest usage
100%
100%
Base64 encoding
100%
100%
Python hmac.new with sha256
100%
100%
Raw bytes for body
100%
100%
Parse after verify
100%
100%
Reject invalid signature
100%
100%
SHOPIFY_API_SECRET env var
0%
100%
Attribution comment
0%
100%
Hookdeck CLI mentioned
0%
100%
200 OK on success
100%
100%
GDPR compliance and async processing
customers/data_request handler
100%
100%
customers/redact handler
100%
100%
shop/redact handler
100%
100%
Async processing pattern
100%
100%
200 OK before slow work
100%
100%
Raw body middleware
50%
100%
Timing-safe comparison
100%
100%
Base64 digest encoding
100%
100%
SHOPIFY_API_SECRET env var
0%
100%
Attribution comment
0%
100%
Reject invalid signature
100%
100%
f8a4801
Table of Contents
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.