Live survey304 models · 14 providers · 22,792 auditsAudited grill-with-docs · SAFE →What changedHow we verifyllms.txt

Agent skill · Audited from source

asc-subscription-localization

skill · rorkai/app-store-connect-cli-skillsMIT licenceAudited 31 Oct 2026 · source 2b8a88b29324

★ 1,115pushed 5 days ago
✓SAFEGrade B · 89/100 · 31 Oct 2026 · 2b8a88b
1,115repo stars · whole rorkai/app-store-connect-cli-skills

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 2b8a88b29324 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Bulk-localize subscription, subscription-group, and in-app purchase display names across App Store locales using asc, including API 4.4.1 version-scoped v2 resources. Use when filling or updating subscription/IAP names…

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “asc-subscription-localization (rorkai/app-store-connect-cli-skills)”. Retrieved 31 Oct 2026. https://modelsatlas.com/skills/rorkai/asc-subscription-localization

2 skills are called “asc-subscription-localization”. You are viewing rorkai/app-store-connect-cli-skills.

Trust audit

Audit 0.4.1 · source read 31 Oct 2026

Trust score89/100✓SAFE B
0 critical0 high0 medium0 low0 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codeNA0
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS0
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (0)

No findings at any severity. We re-audit when the source changes.

Audit 0.4.1 · source sha 2b8a88b29324 · 31 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherrorkai GitHub organizationOwner of the repository this skill is read from
  • Source folderrorkai/app-store-connect-cli-skills/skills/asc-subscription-localizationThe exact folder we audited
  • LicenceMITAs the repository states it
  • Commit pinned for this verdict2b8a88b29324A new audit runs when the source changes
  • Repository statusNot archivedLast push 5 days ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Bulk-localize subscription, subscription-group, and in-app purchase display names across App Store locales using asc, including API 4.4.1 version-scoped v2 resources. Use when filling or updating subscription/IAP names…

---
name: asc-subscription-localization
description: Bulk-localize subscription, subscription-group, and in-app purchase display names across App Store locales using asc, including API 4.4.1 version-scoped v2 resources. Use when filling or updating subscription/IAP names and descriptions without App Store Connect UI work.
---

# asc subscription localization

Use this skill to bulk-create or bulk-update display names and, where supported,
descriptions for subscriptions, subscription groups, and in-app purchases across
all App Store Connect locales. This eliminates the tedious manual process of
clicking through each language in App Store Connect to set the same display
name.

## Preconditions
- Auth configured (`asc auth login` or `ASC_*` env vars).
- Know your app ID (`ASC_APP_ID` or `--app`).
- Subscription groups and subscriptions already exist.

## Choose the API scope first

API 4.4.1 adds discrete versions for IAPs, subscriptions, and subscription
groups. A version ID is different from its product, subscription, or group ID.

- Use `asc ... versions localizations ...` for all new localization work.
- Do not use the product- or group-scoped v1 localization commands. API 4.4.1
  deprecates those resources, and the CLI now emits migration warnings for
  their compatibility commands.
- Never pass a product, subscription, or group ID to a version-scoped command.

Resolve or create versions before localizing them:

```bash
asc iap versions list --iap-id "IAP_ID" --state PREPARE_FOR_SUBMISSION --paginate --output table
asc subscriptions versions list --subscription-id "SUB_ID" --state PREPARE_FOR_SUBMISSION --paginate --output table
asc subscriptions groups versions list --group-id "GROUP_ID" --state PREPARE_FOR_SUBMISSION --paginate --output table
```

Branch independently on each list result: zero matches means create, one means
reuse that version ID, and more than one means stop and require an explicit
version ID. Run each command below only for its zero-match branch:

```bash
# If and only if the IAP version list returned zero matches:
asc iap versions create --iap-id "IAP_ID" --output json
# If and only if the subscription version list returned zero matches:
asc subscriptions versions create --subscription-id "SUB_ID" --output json
# If and only if the group version list returned zero matches:
asc subscriptions groups versions create --group-id "GROUP_ID" --output json
```

None of the three version families has a version delete command. List and
reuse the single `PREPARE_FOR_SUBMISSION` version; create only for zero matches,
and stop for an explicit ID when multiple matches exist. Live parent deletion
did not cascade IAP or subscription versions, so do not assume parent deletion
cleans up versions created for testing.

## Supported App Store Locales

These are the locales supported by App Store Connect for subscription and IAP localizations:

```
ar-SA, ca, cs, da, de-DE, el, en-AU, en-CA, en-GB, en-US,
es-ES, es-MX, fi, fr-CA, fr-FR, he, hi, hr, hu, id, it,
ja, ko, ms, nl-NL, no, pl, pt-BR, pt-PT, ro, ru, sk,
sv, th, tr, uk, vi, zh-Hans, zh-Hant
```

## Import many locales from one file

For bulk writes, map each locale to its fields in one JSON file and import it
into the resolved version ID. Import creates missing locales, updates only
differing fields, never clears or deletes, and reports per-locale failures.

```bash
asc subscriptions versions localizations import --version-id "VERSION_ID" --file "./localizations.json" --dry-run
asc subscriptions versions localizations import --version-id "VERSION_ID" --file "./localizations.json" --confirm
```

`asc iap versions localizations import` takes the same `name` and
`description` fields. `asc subscriptions groups versions localizations import`
takes `name` and `customAppName`. Give every new subscription or IAP locale a
non-empty `description`; see the create rules below.

## Workflow: Bulk-localize a subscription version (v2)

List existing localizations, create only missing locales, then verify:

```bash
asc subscriptions versions localizations list --version-id "VERSION_ID" --paginate --output table
asc subscriptions versions localizations create --version-id "VERSION_ID" --locale "LOCALE" --name "Display Name" --description "Description"
asc subscriptions versions localizations list --version-id "VERSION_ID" --paginate --output table
```

Updates distinguish omitted values, non-empty strings, and JSON `null`:

```bash
asc subscriptions versions localizations update --id "LOC_ID" --name "New Name" --description "Updated description"
```

Do not combine a value flag with its matching `--clear-name` or
`--clear-description` flag. The 4.4.1 schema permits JSON `null`, but Apple's
live service currently rejects both an empty `--description` and
`--clear-description` for subscription-version localizations because the
description must contain at least one character.

Creating a missing subscription-version localization therefore requires a
non-empty description. A display-name-only run may update the name of an
existing localization, but must not create a missing locale until the user
provides a non-empty locale-specific or shared fallback description.

## Workflow: Bulk-localize a subscription group version (v2)

```bash
asc subscriptions groups versions localizations list --version-id "VERSION_ID" --paginate --output table
asc subscriptions groups versions localizations create --version-id "VERSION_ID" --locale "LOCALE" --name "Group Display Name" --custom-app-name "My App"
asc subscriptions groups versions localizations update --id "LOC_ID" --name "Updated Group Display Name" --custom-app-name "My App"
asc subscriptions groups versions localizations list --version-id "VERSION_ID" --paginate --output table
```

Clearing metadata is a separate, explicit opt-in operation. After confirming
that the user wants to remove an existing custom app name, run:

```bash
asc subscriptions groups versions localizations update --id "LOC_ID" --clear-c

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 2b8a88b

Download folder ↗
git clone https://github.com/rorkai/app-store-connect-cli-skills
git -C app-store-connect-cli-skills checkout 2b8a88b29324

The author documents no install command, so this uses the repository directly. Our verdict covers commit 2b8a88b29324 only.

Works in

The author has not said which agents this skill supports, and we have not tested it in any.

Audit history

Every audit, every source change

  1. ✓SAFE B 89 / 100

    first audit · source 2b8a88b29324

README badge

For maintainers · shows the latest audit

ModelsAtlas: SAFE BMODELSATLASSAFE · B
[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/rorkai/asc-subscription-localization/badge.svg)](https://modelsatlas.com/skills/rorkai/asc-subscription-localization/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Add this badge to your README

[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/rorkai/asc-subscription-localization/badge.svg)](https://modelsatlas.com/skills/rorkai/asc-subscription-localization/)

Questions about asc-subscription-localization

What does the asc-subscription-localization skill do?
Skills to automate app store deployed and everything related to it using the asc cli
Is asc-subscription-localization safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can asc-subscription-localization access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (2b8a88b29324), read on 2026-10-31. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.