Appstore signing setup

Skill Xopoko/plug-n-skills/plugins/build-swift-apps/skills/appstore-signing-setup

Ready-to-install skills and plugins for Codex, Claude Code, and AI coding agents: practical workflows for app delivery, architecture, research, design, and agent tooling.

Install

npx -y skills add Xopoko/plug-n-skills --skill appstore-signing-setup

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

8 stars8 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Set up App Store Connect bundle IDs, capabilities, certificates, provisioning profiles, local profile install, and encrypted signing sync with `asc`.

SKILL.md

2.7 KB, 642 tokens by cl100k_base, as published. Nobody here has run it

App Store Signing Setup

Use for new signing assets, rotation, or team sharing.

Preconditions

Auth is configured (asc auth login or ASC_* env vars), bundle id/platform are known, and certificate creation has a CSR or will use --generate-csr.

Workflow

Bundle ID:
- asc bundle-ids list --paginate
- asc bundle-ids create --identifier "com.example.app" --name "Example" --platform IOS
Capabilities:
- asc bundle-ids capabilities list --bundle "BUNDLE_ID"
- asc bundle-ids capabilities add --bundle "BUNDLE_ID" --capability ICLOUD
- use --settings '[{"key":"ICLOUD_VERSION","options":[{"key":"XCODE_13","enabled":true}]}]' when required
Certificate:
- asc certificates list --certificate-type IOS_DISTRIBUTION
- asc certificates create --certificate-type IOS_DISTRIBUTION --csr "./cert.csr"
- asc certificates create --certificate-type IOS_DISTRIBUTION --generate-csr --key-out "./signing/dist.key" --csr-out "./signing/dist.csr"
Profile:
- asc profiles create --name "AppStore Profile" --profile-type IOS_APP_STORE --bundle "BUNDLE_ID" --certificate "CERT_ID"
- development/ad-hoc also pass --device "DEVICE_ID"
Download, inspect, install:
- asc profiles download --id "PROFILE_ID" --output "./profiles/AppStore.mobileprovision"
- asc profiles inspect --path "./profiles/AppStore.mobileprovision" --output table
- asc profiles inspect --path "./profiles/AppStore.mobileprovision" --entitlements --output markdown
- asc profiles local install --path "./profiles/AppStore.mobileprovision"
- asc profiles local list --output table

Rotation

asc certificates revoke --id "CERT_ID" --confirm
asc profiles delete --id "PROFILE_ID" --confirm
asc profiles local clean --expired --dry-run
asc profiles local clean --expired --confirm

Encrypted Sync

Use asc signing sync as a lightweight match-style encrypted git store.

asc signing sync push \
  --bundle-id "com.example.app" \
  --profile-type IOS_APP_STORE \
  --repo "[email protected]:team/certs.git" \
  --password "$MATCH_PASSWORD"

asc signing sync pull \
  --repo "[email protected]:team/certs.git" \
  --password "$MATCH_PASSWORD" \
  --output-dir "./signing"

--password falls back to ASC_MATCH_PASSWORD. Pull writes files only; keychain import/profile install is separate.

Notes

Check --help for enum values. Use --paginate for large accounts. --certificate accepts comma-separated IDs. Device management uses asc devices with UDID. Local profile commands operate on disk, not ASC API resources.

What ships with it

Read from the repository

Just SKILL.md. No reference files, no scripts.

Gives 0 of the 12 instructions most project setup skills give in 642 tokens

Counted across 999 of the 1,637 authors here whose files we hold, read 2026-08-07

ask one question at a timein 29 of 999, across 28 files
detect the package manager from lockfilesin 28 of 999, across 9 files
present findings to the userin 26 of 999, across 5 files
explore current repo statein 24 of 999, across 3 files
update the agent skills block in place if it existsin 24 of 999, across 3 files
install husky lint-staged and prettierin 23 of 999, across 4 files
create the lintstagedrc filein 22 of 999, across 3 files
commit all changed filesin 22 of 999, across 3 files
run lint-staged to verify it worksin 22 of 999, across 3 files
create the husky pre-commit filein 21 of 999, across 2 files
create a prettierrc file if missingin 21 of 999, across 2 files
initialize huskyin 21 of 999, across 2 files

Said here and by no other author read

create the distribution certificate
delete profiles during rotation

Grouped from the skills themselves: near-identical wordings counted once, and counted by distinct author, so one author publishing three of these counts once. Length counted with cl100k_base; the agent that loads this file may tokenize it differently.