GhostCode
Find the apps and leftover code slowing your Shopify theme
GhostCode is a Shopify app that audits your theme. It shows what the apps it can identify cost in page speed, flags scripts from known malicious domains, catches schema prices that disagree with your live prices, lists apps that depend on script tags before they stop running on March 1, 2027, and traces leftover code to the app it matches. It only reads your theme and never edits it, so you decide what to change.
Free and paid plans available.
What GhostCode checks
- Speed cost per app. A lab speed test of your homepage and a product page, showing what each app it can identify costs in speed. Speed reports can repeat on a schedule.
- Malicious scripts. Scripts from known malicious domains in your theme files and on your live homepage.
- Apps in security reports. Code in your theme from apps named in a public security incident report, with a link to the report.
- Schema prices. Product prices in your structured data that disagree with the live price, which AI shopping tools could quote wrong. This check needs read access to products, which you can grant in the app.
- Script tag apps. Apps on your store that still load through script tags, which Shopify stops running on March 1, 2027.
- Leftover app code. Scripts, styles and snippets from apps that may no longer be installed, each traced to the app it matches, with the file, line and code.
- Broken links and old checkout code. Links to deleted products or pages, once you grant products or pages access, and leftover checkout.liquid code.
How it works
Install
GhostCode asks only for read access to your theme. You can grant extra read-only access, such as products and pages, in the app to turn on more checks.
Scan
It reads your theme files from its own servers and loads your public homepage once to see which scripts run there.
Review and decide
Findings are grouped by what they cost you, each traced to the app it matches. You or your developer make any change in the theme code editor.
Who it's for
Shopify merchants, and the agencies who look after their stores, whose themes have collected apps over the years and who want to know what slows the store, whether anything risky is loading, and what uninstalled apps left behind, without giving an app write access to the theme.
Common questions
Does GhostCode change my theme?
No. It asks only for read access to your theme and never edits it. Every change stays in your hands.
Does it remove leftover code for me?
No. It shows the app the code matches, the file, the line and the code itself, so you or your developer can remove it safely.
Does GhostCode add scripts to my store?
No. It has no storefront script or theme app embed. Scans run from GhostCode's servers, each scan loads your public homepage once, and speed tests load your homepage and a product page in a lab test.
Can it find malicious scripts?
It flags scripts from a list of known malicious domains in your theme files and on your live homepage. It reads your theme and homepage, not everything an app loads while shoppers browse, so a clean result doesn't prove nothing is wrong.
What happens to script tags on March 1, 2027?
Shopify stops running script tags on that date. GhostCode lists the apps on your store that still load through script tags, so you can ask each developer about an update or plan a replacement before then.
Is there a free plan?
Free and paid plans available. See the GhostCode listing on the Shopify App Store for features and plans.
Related guides
Get GhostCode
Free and paid plans available.