Appstore signing setup

Skill Xopoko/build-swift-apps/skills/appstore-signing-setup

Set up App Store Connect bundle IDs, capabilities, certificates, provisioning profiles, local profile install, and encrypted signing sync with `asc`.From its SKILL.md

Install

npx -y skills add Xopoko/build-swift-apps --skill appstore-signing-setup

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

3 things to look at

skips confirmationTells the agent to proceed without asking first, 2 times: "run revoke, delete and clean with --confirm" and 1 more.
reads credentialsReads from 3 credential sources: `$MATCH_PASSWORD` and 2 more.
runs commandsInstructs the agent to run 8 commands, including `asc bundle-ids list --paginate` and 7 more.

SKILL.md

2.7 KB, 642 tokens by cl100k_base, as published. Nobody here has run it

App Store Signing Setup

Use for new signing assets, rotation, or team sharing.

Preconditions

Auth is configured (asc auth login or ASC_* env vars), bundle id/platform are known, and certificate creation has a CSR or will use --generate-csr.

Workflow

Bundle ID:
- asc bundle-ids list --paginate
- asc bundle-ids create --identifier "com.example.app" --name "Example" --platform IOS
Capabilities:
- asc bundle-ids capabilities list --bundle "BUNDLE_ID"
- asc bundle-ids capabilities add --bundle "BUNDLE_ID" --capability ICLOUD
- use --settings '[{"key":"ICLOUD_VERSION","options":[{"key":"XCODE_13","enabled":true}]}]' when required
Certificate:
- asc certificates list --certificate-type IOS_DISTRIBUTION
- asc certificates create --certificate-type IOS_DISTRIBUTION --csr "./cert.csr"
- asc certificates create --certificate-type IOS_DISTRIBUTION --generate-csr --key-out "./signing/dist.key" --csr-out "./signing/dist.csr"
Profile:
- asc profiles create --name "AppStore Profile" --profile-type IOS_APP_STORE --bundle "BUNDLE_ID" --certificate "CERT_ID"
- development/ad-hoc also pass --device "DEVICE_ID"
Download, inspect, install:
- asc profiles download --id "PROFILE_ID" --output "./profiles/AppStore.mobileprovision"
- asc profiles inspect --path "./profiles/AppStore.mobileprovision" --output table
- asc profiles inspect --path "./profiles/AppStore.mobileprovision" --entitlements --output markdown
- asc profiles local install --path "./profiles/AppStore.mobileprovision"
- asc profiles local list --output table

Rotation

asc certificates revoke --id "CERT_ID" --confirm
asc profiles delete --id "PROFILE_ID" --confirm
asc profiles local clean --expired --dry-run
asc profiles local clean --expired --confirm

Encrypted Sync

Use asc signing sync as a lightweight match-style encrypted git store.

asc signing sync push \
  --bundle-id "com.example.app" \
  --profile-type IOS_APP_STORE \
  --repo "[email protected]:team/certs.git" \
  --password "$MATCH_PASSWORD"

asc signing sync pull \
  --repo "[email protected]:team/certs.git" \
  --password "$MATCH_PASSWORD" \
  --output-dir "./signing"

--password falls back to ASC_MATCH_PASSWORD. Pull writes files only; keychain import/profile install is separate.

Notes

Check --help for enum values. Use --paginate for large accounts. --certificate accepts comma-separated IDs. Device management uses asc devices with UDID. Local profile commands operate on disk, not ASC API resources.

What ships with it

Read from the repository

Just SKILL.md. No reference files, no scripts.

Gives 0 of the 12 instructions most project setup skills give in 642 tokens

Counted across 1,553 of the 3,091 authors here whose files we hold, read 2026-09-06

Write the configuration filein 36 of 1553
Create the directory structurein 35 of 1553, across 33 files
Verify the setupin 31 of 1553, across 28 files
Run the setup scriptin 30 of 1553, across 29 files
Pre-determine the required sample sizein 29 of 1553, across 12 files
Check if the configuration already existsin 29 of 1553
Document every testin 26 of 1553, across 10 files
Start with a hypothesisin 26 of 1553, across 11 files
Ask one question at a timein 22 of 1553
Test a single variable per testin 21 of 1553, across 9 files
Read product marketing context before asking questionsin 19 of 1553, across 8 files
Do not peek and stop earlyin 18 of 1553, across 7 files

Said here and by no other author read

Add capabilities when required
List distribution certificates
Create certificate with CSR
Create App Store profile
Sync signing assets securely

Grouped from the skills themselves: near-identical wordings counted once, and counted by distinct author, so one author publishing three of these counts once. Length counted with cl100k_base; the agent that loads this file may tokenize it differently.