Audit Scopes — Security skill for Claude Code
Audit and minimize API scopes for security, verify scope usage, and generate scope justification for App Store submission.
How to install Audit Scopes
Installs to ~/.claude/skills/khadinakbarlabs-shopify-app-builder-audit-scopes/SKILL.md
mkdir -p ~/.claude/skills/khadinakbarlabs-shopify-app-builder-audit-scopes && curl -fsSL https://raw.githubusercontent.com/khadinakbarlabs/shopify-app-builder/HEAD/commands/audit-scopes.md -o ~/.claude/skills/khadinakbarlabs-shopify-app-builder-audit-scopes/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Audit Scopes does
description: "Audit and minimize API scopes for security, verify scope usage, and generate scope justification for App Store submission" argument-hint: "current-scopes, target-resource"
Audit and Minimize API Scopes
You are reviewing and optimizing Shopify API scopes to follow least-privilege principle and prepare for App Store certification.
Scope Inventory and Assessment
- List current scopes
- Extract scopes from shopify.app.toml SCOPES array
- Common scopes: read_
Alternatives in Security
- Maestro Knowledge — Intent-driven knowledge-store and Run knowledge lifecycle management — audit/prune, stage candidates (with sig 530 ★
- Bountyforge — All-round bug bounty skill for Claude Code parallelized agents for smart contract audits (EVM, Move, Solana, T 399 ★
- List All Global Skills Sorted By Provider Location — asm list --scope global --sort location asm search "code review" --json asm inspect my-skill asm audit --yes a 185 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Appstore Approval Audit
Pass Apple review on the first try - a Claude Code skill that audits your iOS app (Swift, Expo/RN, Flutter) be
Bug Bounty Hunter
All-round bug bounty skill for Claude Code — parallelized agents for smart contract audits (EVM, Move, Solana,
Appstore Readiness
/appstore-readiness - Full App Store Readiness Audit
Aso Plan
App Store / Play listing ASO audit — plan only, no metadata or screenshot edits until approved
iOS Aso Audit
Audit the App Store listing for keyword coverage, metadata limits, conversion levers, and assets.
Auth Load
Store + validate authenticated test-account credentials for the active web-vuln tier. Paste session material (
Related Agents
Android Specialist
Top-level Android authority. Owns app architecture on Android, scoped storage, foreground services, Doze and A
A0dev
Most people who want an app cannot navigate Xcode, signing certificates, or store submission, so a0.dev remove
App Store Submission Agent
Use this agent before submitting to the App Store or Play Store. It reviews your app for policy compliance, co