Agent skill · Audited from source
asc-testflight-orchestration
skill · rorkai/app-store-connect-cli-skillsMIT licenceAudited 31 Oct 2026 · source 2b8a88b29324
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 2b8a88b29324 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Orchestrate TestFlight distribution, groups, testers, and What to Test notes using asc. Use when rolling out betas.
Cite
Cite this page
ModelsAtlas. “asc-testflight-orchestration (rorkai/app-store-connect-cli-skills)”. Retrieved 31 Oct 2026. https://modelsatlas.com/skills/rorkai/asc-testflight-orchestration
2 skills are called “asc-testflight-orchestration”. You are viewing rorkai/app-store-connect-cli-skills.
- rorkai/app-store-connect-cli-skills★ 1.1k✓SAFE
- rudrankriyam/app-store-connect-cli-skills★ 1.1k✓SAFE
Trust audit
Audit 0.4.1 · source read 31 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (0)
No findings at any severity. We re-audit when the source changes.
Audit 0.4.1 · source sha 2b8a88b29324 · 31 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherrorkai GitHub organizationOwner of the repository this skill is read from
- Source folderrorkai/app-store-connect-cli-skills/skills/asc-testflight-orchestrationThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict2b8a88b29324A new audit runs when the source changes
- Repository statusNot archivedLast push 5 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Orchestrate TestFlight distribution, groups, testers, and What to Test notes using asc. Use when rolling out betas.
--- name: asc-testflight-orchestration description: Orchestrate TestFlight distribution, groups, testers, and What to Test notes using asc. Use when rolling out betas. --- # asc TestFlight orchestration Use this skill when managing TestFlight testers, groups, and build distribution. ## Export current config - `asc testflight config export --app "APP_ID" --output "./testflight.yaml"` - Include builds/testers: - `asc testflight config export --app "APP_ID" --output "./testflight.yaml" --include-builds --include-testers` ## Manage groups and testers - Groups: - `asc testflight groups list --app "APP_ID" --paginate` - `asc testflight groups create --app "APP_ID" --name "Beta Testers"` - A group's builds and testers: `asc testflight groups builds list --group-id "GROUP_ID" --paginate` and `asc testflight groups testers list --group-id "GROUP_ID" --paginate` - Testers: - `asc testflight testers list --app "APP_ID" --paginate` - `asc testflight testers add --app "APP_ID" --email "[email protected]" --group "Beta Testers"` - `asc testflight testers invite --app "APP_ID" --email "[email protected]"` ## Distribute builds - `asc builds add-groups --build-id "BUILD_ID" --group "GROUP_ID"` - Remove from group: - `asc builds remove-groups --build-id "BUILD_ID" --group "GROUP_ID" --confirm` ## Inspect a build's groups - `asc testflight groups list --build-id "BUILD_ID" --output table` - The build lookup is experimental. It resolves the app, paginates the app's groups, and includes groups with all-build access. ## Upload without distribution - `asc publish testflight --app "APP_ID" --ipa "./app.ipa" --upload-only --output json` - Add `--wait` when the next step needs a processed build. - Upload-only requires a new IPA or local Xcode build. Do not combine it with an existing `--build-id`, groups, tester notifications, test notes, or beta-review submission. `--build-number` is allowed as upload metadata, but it cannot be the only build input. ## What to Test notes - `asc builds test-notes create --build-id "BUILD_ID" --locale "en-US" --whats-new "Test instructions"` - `asc builds test-notes update --localization-id "LOCALIZATION_ID" --whats-new "Updated notes"` ## Notes - Use `--paginate` on large groups/tester lists. - Prefer IDs for deterministic operations; use the ID resolver skill when needed.
Excerpt, first 2,348 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 2b8a88b
git clone https://github.com/rorkai/app-store-connect-cli-skills git -C app-store-connect-cli-skills checkout 2b8a88b29324
The author documents no install command, so this uses the repository directly. Our verdict covers commit 2b8a88b29324 only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
2b8a88b29324
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/rorkai/asc-testflight-orchestration/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
All automation skills →rorkai/app-store-connect-cli-skills
Bulk-localize subscription, subscription-group, and in-app purchase display names across App Store locales using asc, including API 4.4.1 version-scoped v2 resources. Use when filling or updating subscription/IAP names…
rudrankriyam/app-store-connect-cli-skills
Orchestrate TestFlight distribution, groups, testers, and What to Test notes using asc. Use when rolling out betas.
rudrankriyam/app-store-connect-cli-skills
Submit or update a Wall of Apps entry in the App-Store-Connect-CLI repository using `asc apps wall submit`. Use when the user says "submit to wall of apps", "add my app to the wall", or "wall-of-apps".
rorkai/app-store-connect-cli-skills
Reconcile App Store Connect subscriptions and in-app purchases with RevenueCat products, entitlements, offerings, and packages using asc and RevenueCat MCP. Use when setting up or syncing subscription catalogs across…
rorkai/app-store-connect-cli-skills
Resize and validate App Store screenshots with current asc screenshot-size data and macOS sips. Use when preparing or fixing screenshots for App Store Connect submission.
rudrankriyam/app-store-connect-cli-skills
Resize and validate App Store screenshots with current asc screenshot-size data and macOS sips. Use when preparing or fixing screenshots for App Store Connect submission.
Add this badge to your README
[](https://modelsatlas.com/skills/rorkai/asc-testflight-orchestration/)
<a href="https://modelsatlas.com/skills/rorkai/asc-testflight-orchestration/"><img src="https://modelsatlas.com/skills/rorkai/asc-testflight-orchestration/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about asc-testflight-orchestration
What does the asc-testflight-orchestration skill do?
Is asc-testflight-orchestration safe to install?
What can asc-testflight-orchestration access on my machine?
How current is this page?
Sources
- github.com/rorkai/app-store-connect-cli-skills/tree/main/skills/ — the audited source at commit 2b8a88b29324 and every finding aboveObserved · 31 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the asc-testflight-orchestration skill do?
- Is asc-testflight-orchestration safe to install?
- What can asc-testflight-orchestration access on my machine?