appstore-connect-cli — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited appstore-connect-cli (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use when running or designing asc commands.
--help: asc --help, asc builds --help, asc builds list --help.asc search "submit app for review"asc search --output table "upload build"asc schema --pretty "GET /v1/apps"asc schema --method POST appStoreVersionsasc capabilities --area release --output tableasc capabilities --status not-public-api --output markdownview for reads, edit for update-only availability, and set only where the CLI models replacement/configuration.--confirm.--paginate only when all pages are needed.--output table/markdown for humans; --pretty only with JSON.Examples:
asc apps view --id "APP_ID"
asc versions view --version-id "VERSION_ID"
asc pricing availability edit --app "APP_ID" --territory "USA,GBR" --available true
asc xcode version edit --build-number "42"Prefer asc auth login. Env fallback: ASC_KEY_ID, ASC_ISSUER_ID, ASC_PRIVATE_KEY_PATH, ASC_PRIVATE_KEY, ASC_PRIVATE_KEY_B64. ASC_APP_ID can provide the default app. For unclear key permissions, inspect asc web auth capabilities or --key-id.
Apple Ads uses asc ads auth, --ads-profile, and ASC_ADS_*, not ASC API credentials. Run asc ads --help, resolve orgs with asc ads acls --output json, pass --org or ASC_ADS_ORG_ID, and use --file JSON payloads for body commands. Destructive/bulk deletes require --confirm. For live mutation tests, create paused resources with clear test names and delete the parent campaign.
ASC_TIMEOUT / ASC_TIMEOUT_SECONDS control request timeouts. ASC_UPLOAD_TIMEOUT / ASC_UPLOAD_TIMEOUT_SECONDS control uploads.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.