appstore-archive-uploader — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited appstore-archive-uploader (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Prefer asc xcode archive and asc xcode export over raw xcodebuild when they fit.
Xcode/CLT installed; signing identity/profiles or automatic signing available; ASC auth configured for upload/build lookup.
asc xcode version view
asc xcode version edit --version "1.3.0" --build-number "42"
asc xcode version bump --type build
asc xcode version bump --type patch
asc builds next-build-number --app "APP_ID" --version "1.2.3" --platform IOS --output json
asc xcode version edit --build-number "NEXT_BUILD"Use --project-dir, --project, and --target for multi-project/target determinism.
asc xcode archive --workspace "App.xcworkspace" --scheme "App" --configuration Release \
--clean --archive-path ".asc/artifacts/App.xcarchive" \
--xcodebuild-flag=-destination --xcodebuild-flag=generic/platform=iOS --output json
asc xcode export --archive-path ".asc/artifacts/App.xcarchive" \
--export-options "ExportOptions.plist" --ipa-path ".asc/artifacts/App.ipa" \
--xcodebuild-flag=-allowProvisioningUpdates --output jsonUse --project "App.xcodeproj" for project-only apps. Add --wait to export/upload/publish when the next step depends on processed builds.
Upload/distribute:
asc builds upload --app "APP_ID" --ipa ".asc/artifacts/App.ipa" --wait
asc publish testflight --app "APP_ID" --ipa ".asc/artifacts/App.ipa" --group "GROUP_ID" --wait
asc publish appstore --app "APP_ID" --ipa ".asc/artifacts/App.ipa" --version "1.2.3" --wait
asc publish appstore --app "APP_ID" --ipa ".asc/artifacts/App.ipa" --version "1.2.3" --wait --submit --confirmasc xcode archive --project "MacApp.xcodeproj" --scheme "MacApp" --configuration Release \
--clean --archive-path ".asc/artifacts/MacApp.xcarchive" \
--xcodebuild-flag=-destination --xcodebuild-flag=generic/platform=macOS --output json
xcodebuild -exportArchive -archivePath ".asc/artifacts/MacApp.xcarchive" \
-exportPath ".asc/artifacts/MacAppExport" -exportOptionsPlist "ExportOptions.plist" \
-allowProvisioningUpdates
asc builds upload --app "APP_ID" --pkg ".asc/artifacts/MacAppExport/MacApp.pkg" \
--version "1.0.0" --build-number "123" --waitPKG uploads require explicit --version and --build-number.
xcodebuild only when asc xcode archive/export --help cannot cover an option; try --xcodebuild-flag first.--xcodebuild-flag=-allowProvisioningUpdates, verify Xcode account/profiles, or use appstore-signing-setup.asc builds next-build-number, edit, rebuild, upload.--overwrite only when intentionally replacing local artifacts.appstore-review-readiness.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.