Liquid memory.
Theme-app proxy audit.

Your agent re-reads Dawn every turn.

You ask Claude Code: *"Add a quantity-selector to the product card."* It greps sections/main-product.liquid for the quantity input. Then it greps snippets/product-quantity.liquid. Then it re-reads config/settings_schema.json to find the cart-update mode. Then it asks you what theme settings are even relevant.

Every re-read costs tokens. Every re-grep is a stale lookup that ignores the structural map of which section includes which snippet, which settings keys gate which blocks, which app blocks the theme registers. The structural map exists in the theme — the agent just doesn't have a structured way to query it.

Card 1 ingests the full Liquid + Dawn schema into the brain. Sections, snippets, includes, settings, schemas, blocks — all queryable via the precision layer. Your agent calls preflight({target: "product-quantity"}) and gets every include + every caller + every setting that touches it. One call. $0.

🛡 Hooks understand Liquid + Dawn.

Card 1's hooks fire on every Edit / Write in your theme repo. The code verification backing them knows:

• Section / snippet inclusion graph — edit a snippet, hook flags which sections include it, which templates render those sections, which app blocks register inside.
• Settings schema awareness — agent edits schema block of a section; preflight surfaces which other Liquid files read those settings, prevents removed-but-referenced setting keys.
• Translation key dependencies — agent renames a locales/en.default.json key; verify_no_fake_done catches the now-broken {{ 'foo.bar' | t }} in liquid files.
• App block registrations — agent edits a section's schema; flags which app blocks (your or third-party) the section accepts, prevents accidental removal of { "type": "@app" } targets.

🔴 Theme-app proxy. App blocks. Admin scopes.

Shopify-specific findings the generic Red Team Audit picks up + escalates:

• Theme-app proxy script-tag XSS — your app injects <script> into the storefront via theme-app extension. If unsanitised customer / metafield data flows into that script, that's stored XSS reaching every storefront visitor. Card 2's Web/API perspective + AI/LLM perspective both flag this pattern.
• App-block privilege escalation — app block reads shop.metafields.* for "personalisation" but actually exfils PII to your server. Forgotten Attack Surface flags zombie blocks no longer in active templates but still registered in main-theme schema.
• Admin API scope creep — your app added read_orders for a feature you shipped, then deprecated the feature but kept the scope. Surface Drift Watch catches the scope-in-manifest-but-no-code-uses-it case.
• App proxy endpoint auth — your /apps/your-app/... proxy endpoint relies on Shopify-signed query params. Auth-bypass-finder verifies signature check happens before any state mutation.
• Storefront API session token leakage — Card 2's PII flow mapper traces customer access tokens from customer.token through every cart-mutation endpoint, flags any storage in localStorage without expiry.

Output: same as generic Card 2 — MITRE-mapped kill chains + PoC pseudocode + structural reachability evidence. Pairs with Shopify's own app review process; doesn't replace it.

Liquid + Dawn + theme-app extensions + Remix apps.

The brain ingests:

• Theme repos — Dawn + horizon + craft + any Online Store 2.0 theme. Liquid is one of the 13 supported languages at v0.1.
• Theme app extensions — blocks/ + assets/ + extension.toml. App-block registrations parsed structurally.
• Remix apps — TypeScript / JavaScript first-class. App proxy routes, GraphQL Admin API calls, webhook handlers all queryable.
• Functions (Rust + WASM) — Shopify Functions in Rust have first-class Rust support; we have not yet verified the WASM bindings introspect cleanly, expect minor rough edges (file an issue).
• Hydrogen / Oxygen — TypeScript via the standard TS/JS backend.

Five lines. Two cards. Liquid-aware.

curl -fsSL https://argosbrain.com/install.sh | sh
cd ~/my-shopify-theme
argosbrain init --install-config .

Detects your theme (presence of config/settings_schema.json or shopify.theme.toml) and tunes the Liquid backend. Same for Remix apps (shopify.app.toml). Restart your AI agent. Card 1 hooks fire on every Liquid edit. Type /argos-security to run Card 2.

Local by default. Always.

Theme code (which often contains hardcoded brand copy + price logic + competitive theme structure) stays on your machine. No cloud round-trip during ingestion or retrieval. Solo + open-source themes free indefinitely. Agencies on Shopify Plus client work — talk to [email protected] about team tier pricing.

Try it on your theme.

Get your free key → · The two services · Skills · Shopify-specific posts · Talk to engineering