Hire an AI store app and script reviewer

Everything it can hand back

Your task sets the actual outputs. The specialist picks the methods that cover them.

• Keep, swap or cut for every app, with a score out of 100 and what to export before you cut
• Every script and app ranked High, Medium or Low risk, with a score out of 100
• A clean-up list of what to remove, which keys and seats to revoke and which widgets to move off checkout
• Notes for a developer on pinned versions and a content security policy

How it does the job well

• Name the asset, the threat and the impact before recommending controls.
• Rank findings by real risk (likelihood and impact), with evidence for each.
• Prefer fixes that remove a problem over warnings that rely on people.
• Cite the exact law, standard or clause for compliance and legal points, and recommend qualified review.

Mistakes it avoids

• Long lists of generic issues with no evidence they apply.
• Testing or scanning systems without permission.
• Presenting a legal opinion as final.

What a good result looks like

An example, not your task: You have years of installed apps and cannot say what each one does.

• Step 1: App stack. Each app with its cost, use, a keep, swap or cut verdict and reason, plus a score out of 100.
• Export before you cut. What to save from each app you remove, such as reviews or email flows, and the install order.
• Step 2: Script and app risk. Each script and app with its owner, where it loads, a High, Medium or Low risk and an action.
• Clean-up list. What to remove, which keys and staff seats to revoke, and which widgets to move off checkout.
• Notes for a developer. Points on pinned versions and a content security policy for your developer to act on.
• Hand-back summary. Each step's file, any step not run, and every missing item in one list.

How the work is checked

• Each step passed its own checks, or the run stopped at the step that failed and says why.
• The steps ran in order, and each one used the result of the one before.
• Nothing was invented to fill a gap. Every gap is a MISSING: line.
• Nothing was sent, published or paid for without a clear yes.
• States which checks passed, failed or could not run, and names missing inputs.

These checks have not been run against a model yet. Your AI uses them to check its own work.

Capabilities

• Sort your apps into keep, swap or cut. Lists each app with its cost and use, marks the dead ones, checks free built-in tools first, vets what stays and scores the stack out of 100.
• Pause to cut and collect scripts. You remove the apps marked cut, then save the list of scripts that load on your home, product, cart and account pages.
• Rank the scripts and apps that are left by risk. Records who runs each script and where it loads, flags plain http and unknown vendors, scores the set and writes the clean-up list.

How the role works

1. Checks your task, context and available tools.
2. Picks the methods needed and prepares a work plan.
3. Carries out supported tasks, with each method's limits and review gates.
4. Checks the real deliverables and corrects supported faults.
5. Hands back files, evidence and unresolved gaps.

Your specialist's working setup

Download the base specialist without a task form or account. README.md and SETUP.md explain how to use the folder. SOUL.md defines its scope. INTAKE.md asks missing questions inside your AI. PLAYBOOK.md, SKILLS.md, BEST_PRACTICES.md, CHECKS.md and HANDOFF.md guide the work and its checked deliverables.

Complete associated skills, supporting files and licences are included. Choose only the methods needed for the actual task. Keep context, working files and accepted feedback in your AI project.

Use this specialist through MCP or the API

Call prepare_specialist with role_id cut-risky-apps-and-scripts-from-your-store only. No task is required to load it. Your AI asks what job you need done, what you want back and which relevant context it can use.

For task-led hiring, call find_specialist, explain the suggested specialists and let the user accept or change the team.

Complete ZIP: Download base specialist. API: GET /api/v1/specialists/cut-risky-apps-and-scripts-from-your-store/pack. The host AI supplies its own model, tools and execution; a pack does not connect accounts or run a task.

Inputs and helpful context

The specialist starts from the task brief. Only active methods require their inputs.

For the primary method, when used

• Your installed apps with monthly cost and what each is used for
• Which pages take card, address or login details
• After the pause, the scripts each page loads, from the network tab or page source
• Staff browser extensions in use (optional)

Tools and access

• Shopify admin: The apps list, the theme speed rating and the app embeds all live here.
• Google PageSpeed Insights: Free speed test for a page, to check after each change.
• Any good chat AI: Any current chat AI can compare your list against the rules.
• Browser developer tools (network tab): Free in Chrome, Firefox and Safari. It lists every script a page loads, including ones that load other scripts.
• Any good chat AI: Any current chat AI can build the inventory and rank risk from pasted lists.

Functions and deliverables

• Store app and script reviewer: Review which store apps to keep, replace or remove, then inspect the scripts that remain after approved changes.
  • Keep, swap or cut for every app, with a score out of 100 and what to export before you cut
  • Every script and app ranked High, Medium or Low risk, with a score out of 100
  • A clean-up list of what to remove, which keys and seats to revoke and which widgets to move off checkout
  • Notes for a developer on pinned versions and a content security policy
• Store app stack picker: Check your Shopify app stack. List each app and get keep, swap or cut, a vetting list for new apps, and a score out of 100.
  • Keep, swap or cut for each app, with the reason
  • A free built-in replacement where one exists
  • An install order, what to switch on in the theme, and speed check points
  • A vetting checklist for future apps and a score out of 100 for the stack
• Store script and app risk auditor: Check the scripts, apps and pixels on your store for risk. Get each one ranked, a score out of 100 and a list of what to remove and revoke.
  • One row per script or app: owner, purpose, risk level, what it can see and the action
  • A score out of 100 with how it was counted
  • A removal list that includes keys, webhooks and staff seats to revoke
  • A list of scripts the skill could not judge and why
• Store app script reviewer: Give it your apps and speed report. Get each app marked keep, remove or delay, and a score.
  • A table with each app, what it loads, which pages need it, the verdict and the reason
  • A score out of 100 for your apps, now and after the changes, with the sum shown
  • A list of apps to uninstall, with a follow-up for the leftover app code finder
  • A list of apps to delay, for the theme script and style loader
  • A rule for the next app you install
• me.md builder: Answer a few questions, or let your AI use what it remembers. Get one private file that tells any AI who you are.
  • One me.md file with up to ten dated sections
  • A list of facts taken from memory, for you to check
  • A short note of what it removed for privacy
  • The two next steps, to save it and set it up

Tasks you can use it for

• You have years of installed apps and cannot say what each one does.
• You want to know which scripts can read what a customer types at checkout.
• A vendor was sold or an extension changed hands and you want to check what it can do now.

Limits to check before starting

• You only need a verdict on each app: use the Store app stack picker on its own.
• You have no app list and no way to view your page scripts: ask your developer or your store's support team to list them first.
• Your store has a fully custom checkout with no app list: ask a developer for a code review instead.

Best way to use this role

Give it one clear outcome, the actual files and a definition of done. Keep the work in one AI project so it can reuse checked context and earlier files.

• Download the handoff pack from this page. It is a zip with HANDOFF.md and the two skill files this workflow uses. Unzip it and keep them together in one folder.
• Give the folder to Claude (in Claude Code, or as files in a Claude Project) and say "Follow HANDOFF.md".
• Export your reviews and email flows before you cut a review or email app. Removing one can break both.
• After step 1, remove the cuts, then collect the script list for the pause.
• Never paste passwords or API keys. The steps do not need them.

Read it as data

Read the complete role setup as JSON. Connect your AI to the AI Blocks MCP library and read aiblocks://roles/cut-risky-apps-and-scripts-from-your-store for its role instructions and pinned sources.

This is a prepared AI role. No task has run. Your AI carries out authorized work using its available tools and reports the actual deliverables and checks.