* feat(commerce): add commerce-app-review plugin * fix(commerce): address review feedback on app-review skill - Rebuild well-formed-app fixture on App Management (real confirmed patterns for config, auth, deploy.yaml; no dead credentials) - Fix cors-storefront-actions.md, non-downloadable.md, aio-commerce-sdk.md per review feedback; remove aio-lib-state.md (unverified claim) - Add accs-rest-api-dependency.md pattern - Add aio preflight check to SKILL.md Step 1 * eval: test changes * fix(commerce): address review feedback on app-review skill - Rebuild well-formed-app fixture on App Management using confirmed real patterns: getCommerceClient/resolveImsAuthParams for auth, no manual credential business config, ESM throughout, and aio-lib-core-logging instead of Core.Logger/aio-sdk - Fix deploy.yaml to match actual extension structure and drop fabricated apis entries - Hoist LOG_LEVEL to package-level inputs in ext.config.yaml - Update package.json dependency versions to current releases - Fix vendor attribution (author + copyright headers) to reflect a third-party submission rather than Adobe itself - Fix cors-storefront-actions.md, non-downloadable.md, and aio-commerce-sdk.md per review feedback; remove aio-lib-state.md (unverified encryption claim) - Add accs-rest-api-dependency.md pattern - Add aio preflight check to SKILL.md Step 1 - Update evals.json to match verified current skill behavior * eval: test changes * fix(commerce): trim meta-package detail in aio-commerce-sdk.md * chore(commerce): add .tessl-plugin/plugin.json for Tessl eval detection * eval: test changes
2.0 KiB
commerce-app-review
A Claude Code skill for system integrators, developers, and partners to self-review an Adobe Commerce App Builder app against the submission guidelines before submitting to Adobe Exchange.
This plugin is public and published to adobe/skills for use by anyone building Commerce extensions.
Note: This skill is a self-service tool to catch common issues early — it may miss some findings or flag things that don't apply to your specific app. The Adobe Commerce team will do a full review when you submit to Adobe Exchange.
Requirements
| Tool | Install (macOS) | Purpose |
|---|---|---|
aio |
npm install -g @adobe/aio-cli |
IMS token for documentation-grounded enrichment |
aio must be authenticated (aio login) for the skill to fetch live context from the Adobe Commerce documentation index. The skill can run without it but will warn and ask whether to continue with fallback enrichment.
Run commerce-app-review from your app's root directory. For a full walkthrough, see USAGE.md.
Reference library
The skill ships with a curated reference library under skills/commerce-app-review/references/:
patterns/— team-validated implementation rules (e.g. how CORS must be configured for storefront-facing actions). When a pattern applies, the finding links to it directly.exceptions/— documented cases where a guideline may legitimately be relaxed (e.g. whenrequire-adobe-auth: falseis acceptable). The skill checks exceptions before flagging a finding to avoid false positives.finding.md— the output template the skill fills in for each enriched finding (context, remediation, proposed fix, references). Edit this to change how findings are formatted.
Both patterns and exceptions take precedence over the upstream submission guidelines when they conflict. To add a new pattern or exception, copy the template from references/templates/ and place it in the appropriate directory.