cursorrules — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited cursorrules (Rules) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Agent skills for building, maintaining, and upgrading Shopify Hydrogen storefronts with Weaverse. Works with Claude Code, Cursor, GitHub Copilot, Windsurf, OpenCode, OpenClaw, Gemini CLI, and any agent that supports markdown skill files.
Why skills, not docs? Skills are concise, agent-optimized knowledge that your coding agent loads before working on a task — structured for LLMs, not humans. Pair them with live doc search for the best results.
npx skills add Weaverse/shopify-hydrogen-skillsAuto-detects your coding agents and installs to all of them. Powered by skills.sh.
For manual per-agent setup, see INSTALL.md.
| Skill | What the agent learns | When to load |
|---|---|---|
setup-weaverse-project | Fast new-project onboarding — CLI-first scaffold, demo-store boot before credentials, generated SESSION_SECRET, GitHub repo, Builder preview connection | Starting a brand-new Weaverse Hydrogen storefront or running a theme locally for the first time |
shopify-hydrogen | Core Hydrogen APIs — createHydrogenContext, cart handler, caching, pagination, SEO, CSP | Working with @shopify/hydrogen APIs |
weaverse-hydrogen | Weaverse components, schemas, loaders, theming, deployment | Any Hydrogen + Weaverse project |
hydrogen-cookbooks | Step-by-step guides — bundles, combined listings, 3D models, customer accounts, performance | Building specific features |
hydrogen-upgrades | Breaking changes and migration steps for Hydrogen framework versions | Upgrading Hydrogen framework |
theme-update | Safe Pilot theme updates — detect version, plan changes, preserve customizations, verify build | Updating a customer's Pilot theme |
weaverse-integration | Integrate Weaverse into an existing Hydrogen project — analyze codebase, convert components, set up SDK, configure routes | Adding Weaverse to a project that doesn't use it yet |
cloning-websites-to-weaverse | Recreate reference websites as Hydrogen + Weaverse pages with preview checkpoints and section mapping | Cloning a site or brand hub into Weaverse |
figma-to-weaverse | Turn a Figma design into Weaverse sections via Figma MCP — token mapping, component-state-driven interactions, content manifest, preview checkpoint, Playwright visual + hover/click check against Figma until PASS | Building a storefront from a Figma file |
generating-weaverse-project-json | Generate import-ready Weaverse project export JSON from section plans, specs, or existing exports | Building Weaverse import files |
weaverse-content-api | Read/update Weaverse content over the REST Content API — live item edits, drafts and explicit publish/schedule/restore, translations, project lifecycle, Shopify resource upload | Updating a project's content, publishing flow, or translations via API |
hydrogen-analytics-tracking | End-to-end tracking on Hydrogen — GTM, GA4 (browser + Measurement Protocol), Meta Pixel + CAPI, Google Ads, Consent Mode v2, CSP, Oxygen FPC, Weaverse webhook forwarding | Implementing analytics/conversion tracking on a Hydrogen storefront |
hydrogen-markets-localization | End-to-end Shopify Markets localization — canonical market config, locale routing, Weaverse translations, RTL, cart/account/checkout continuity, SEO, and production readback | Adding or reviewing markets, locales, translations, hreflang, or localized commerce flows |
The site-building skills chain from a source (website or Figma) to a live, maintainable Weaverse project:
INPUT ADAPTERS GENERATE DELIVER
cloning-websites-to-weaverse ┐
├─→ generating-weaverse-project-json ─→ import once into Studio (creates structure)
figma-to-weaverse ┘ └─→ weaverse-content-api (updates content after,
bulk edits, Shopify resource upload)Initial structure is created by importing the generated JSON, page-by-page via POST /projects/:projectId/pages, or as a whole project via the Content API's project lifecycle. Everything after — copy, images, localization, bulk edits, staged draft→publish flows — goes through the Content API, which updates existing items, adds new typed items, relinks children, creates/deletes pages, and restores versions.
Instead of baking static API docs into skill files (which go stale), this repo ships live doc fetching scripts that query official sources at runtime:
# Search Shopify Hydrogen docs (shopify.dev)
node skills/shopify-hydrogen/scripts/search_shopify_docs.mjs "createHydrogenContext"
node skills/shopify-hydrogen/scripts/search_shopify_docs.mjs "CartForm actions"
# Search Weaverse docs (docs.weaverse.io)
node skills/shopify-hydrogen/scripts/search_weaverse_docs.mjs "component schema"
# Fetch a specific Weaverse doc page
node skills/shopify-hydrogen/scripts/get_weaverse_page.mjs "development-guide/component-schema"
# Check for Pilot theme updates
node skills/theme-update/scripts/check_pilot_updates.mjsThe references/ folders in each skill serve as offline fallback — cached snapshots for when live search is unavailable.
| Script | Source | Endpoint |
|---|---|---|
shopify-hydrogen/scripts/search_shopify_docs.mjs | shopify.dev | Hydrogen API search |
shopify-hydrogen/scripts/search_weaverse_docs.mjs | weaverse.io/docs | Weaverse docs search (Mintlify MCP) |
shopify-hydrogen/scripts/get_weaverse_page.mjs | weaverse.io/docs | Full page fetch by path |
shopify-hydrogen/scripts/check_docs_helpers.mjs | none | Helper boundary checks (offline) |
theme-update/scripts/check_pilot_updates.mjs | github.com | Pilot release version check |
All scripts are zero-dependency — Node.js 18+ built-ins only.
├── skills/
│ ├── setup-weaverse-project/ # New project setup from zero to local preview
│ │ └── SKILL.md
│ │
│ ├── shopify-hydrogen/ # Core Hydrogen APIs
│ │ ├── SKILL.md
│ │ └── references/ # Setup, caching, cart patterns
│ │
│ ├── weaverse-hydrogen/ # Weaverse CMS integration
│ │ ├── SKILL.md
│ │ ├── references/ # 13 deep-dive guides
│ │ └── examples/ # Production-ready component code
│ │
│ ├── hydrogen-cookbooks/ # Feature recipes
│ │ ├── SKILL.md
│ │ └── references/ # Bundles, combined listings, 3D, etc.
│ │
│ ├── hydrogen-upgrades/ # Framework version migrations
│ │ ├── SKILL.md
│ │ └── references/ # 2024.4.7 → … → 2026.4.7
│ │
│ ├── theme-update/ # Pilot theme updater
│ ├── SKILL.md
│ └── scripts/
│ └── check_pilot_updates.mjs
│
│ ├── weaverse-integration/ # Integrate into existing Hydrogen
│ └── SKILL.md
│
│ ├── cloning-websites-to-weaverse/ # Clone sites into Weaverse
│ │ └── SKILL.md
│
│ ├── figma-to-weaverse/ # Figma design → Weaverse sections
│ │ ├── SKILL.md
│ │ └── references/ # Figma MCP extraction + token mapping
│
│ ├── generating-weaverse-project-json/ # Weaverse import JSON generator
│ │ ├── SKILL.md
│ │ ├── references/
│ │ └── scripts/
│
│ ├── weaverse-content-api/ # Live content read/update over REST
│ │ ├── SKILL.md
│ │ ├── references/ # Endpoints + Portable Text
│ │ └── scripts/
│ │ └── weaverse_content_api.mjs
│ │
│ └── hydrogen-markets-localization/ # Markets and localization workflow
│ ├── SKILL.md
│ └── references/ # Verification checklist
│
├── .cursorrules # Cursor agent rules
├── AGENTS.md # Repo guidance for AI agents
├── INSTALL.md # Manual per-agent install guide
└── package.jsonPRs welcome — especially for:
MIT — Weaverse
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.