I’ve been working on a project called webhook-skills - a collection of agent skills that help AI coding assistants (Cursor, Claude Code, Copilot) implement webhook integrations correctly.
I just added a Shopify-specific skill for HTTPS webhooks that covers:
- HMAC signature verification (with the base64 encoding gotchas)
- Common event handling patterns
- Working examples for Express, Next.js, and FastAPI
Current examples use manual HMAC verification (no SDK dependency). A React Router example using @shopify/shopify-app-react-router is planned.
Shopify skill: webhook-skills/skills/shopify-webhooks at main · hookdeck/webhook-skills · GitHub
Full repo: github.com/hookdeck/webhook-skills
Would love feedback from folks who work with Shopify webhooks regularly. Are there specific events, gotchas, or framework examples we should prioritize? PRs welcome!