Agent skill · Audited from source
asc-app-create-ui
skill · rudrankriyam/app-store-connect-cli-skillsMIT licenceAudited 20 Oct 2026 · source c079831542f6
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit c079831542f6 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Create a new App Store Connect app record via browser automation. Use when there is no public API for app creation and you need an agent to drive the New App form.
Cite
Cite this page
ModelsAtlas. “asc-app-create-ui (rudrankriyam/app-store-connect-cli-skills)”. Retrieved 20 Oct 2026. https://modelsatlas.com/skills/rudrankriyam/asc-app-create-ui
2 skills are called “asc-app-create-ui”. You are viewing rudrankriyam/app-store-connect-cli-skills.
- rudrankriyam/app-store-connect-cli-skills★ 1.1k✓SAFE
- rorkai/app-store-connect-cli-skills★ 1.1k✓SAFE
Trust audit
Audit 0.4.1 · source read 20 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 2 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (2)
INFOPrompt injectionprompt.authority_framing · SKILL.md:21
- user access (Full Access or Limited Access)
- Why
- No further detail recorded for this rule.
- Fix
- —
INFOPrompt injectionprompt.authority_framing · SKILL.md:76
- Options: `Limited Access` or `Full Access`.
- Why
- No further detail recorded for this rule.
- Fix
- —
Audit 0.4.1 · source sha c079831542f6 · 20 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherrudrankriyam GitHub organizationOwner of the repository this skill is read from
- Source folderrudrankriyam/app-store-connect-cli-skills/skills/asc-app-create-uiThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdictc079831542f6A new audit runs when the source changes
- Repository statusNot archivedPushed today
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Create a new App Store Connect app record via browser automation. Use when there is no public API for app creation and you need an agent to drive the New App form.
--- name: asc-app-create-ui description: Create a new App Store Connect app record via browser automation. Use when there is no public API for app creation and you need an agent to drive the New App form. --- # asc app create (UI automation) Use this skill to create a new App Store Connect app by driving the web UI. This is opt-in, local-only automation that requires the user to be signed in. ## Preconditions - A browser automation tool is available (Playwright, Cursor browser MCP, or equivalent). - User is signed in to App Store Connect (or can complete login + 2FA). - The **bundle ID must already be registered** in the Apple Developer portal. - Required inputs are known: - app name (max 30 characters) - bundle ID (must exist and be unused by another app) - SKU - platform (iOS, macOS, tvOS, visionOS) - primary language - user access (Full Access or Limited Access) ## Safety Guardrails - Never export or store cookies. - Use a visible browser session only. - Pause for a final confirmation before clicking "Create" (for standalone scripts). - Do not retry the Create action automatically on failure. ## Workflow ### 1. Preflight: register bundle ID and verify no existing app ```bash # Register the bundle ID via public API (if not already registered) asc bundle-ids create --identifier "com.example.app" --name "My App" --platform IOS # Confirm no app record exists yet asc apps list --bundle-id "com.example.app" --output json ``` ### 2. Open App Store Connect Navigate to `https://appstoreconnect.apple.com/apps` and ensure the user is signed in. ### 3. Open the New App form The "New App" button (blue "+" icon) opens a **dropdown menu**, not a dialog directly. - Click the "New App" button to open the dropdown. - Click the "New App" **menu item** inside the dropdown. - The creation dialog/modal appears. ### 4. Fill required fields (in order) #### Platform (checkboxes) The platforms are **checkboxes** (not radio buttons). Click the checkbox for the desired platform(s): - iOS, macOS, tvOS, visionOS - Multiple can be selected. #### Name (text input) - Label: `Name` - Max 30 characters. #### Primary Language (select/combobox) - Label: `Primary Language` - Use `select_option` or equivalent with the language label (e.g., `"English (U.S.)"`). #### Bundle ID (select/combobox) - Label: `Bundle ID` - This is a `<select>` dropdown. The options load asynchronously after platform selection. - Wait for the dropdown to finish loading (it shows "Loading..." initially). - Select by matching the label text which includes both the name and identifier: `"My App - com.example.app"` #### SKU (text input) - Label: `SKU` #### User Access (radio buttons) -- REQUIRED - **This field is required.** The Create button stays disabled until one option is selected. - Options: `Limited Access` or `Full Access`. - These are custom radio buttons with `<span>` overlays. - **Known issue:** Accessibility-based clicks may be intercepted by the overlay `<span>`. - **Workaround:** Use `scrollIntoView` on the radio element first, then click the radio ref directly. This bypasses the overlay interception. ### 5. Click Create - The "Create" button is disabled until all required fields are filled **and** User Access is selected. - After clicking, the button text changes to "Creating" while processing. - Wait for navigation to the new app's page (URL pattern: `/apps/<APP_ID>/...`). ### 6. Verify creation via API ```bash asc apps view --id "APP_ID" --output json --pretty # or asc apps list --bundle-id "com.example.app" --output json ``` ### 7. Hand off to post-create setup ```bash asc app-setup info set --app "APP_ID" --primary-locale "en-US" asc app-setup categories set --app "APP_ID" --primary GAMES asc pricing availability create \ --app "APP_ID" \ --territory "USA,GBR" \ --available true \ --available-in-new-territories true ``` Use `asc pricing availability create` only for the first availability bootstrap. If Apple rejects that public-API bootstrap, authenticate a web session with `asc web auth login --apple-id "EMAIL"` and retry with `asc web apps availability create --app "APP_ID" --territory "USA,GBR" --available-in-new-territories true`, or configure Pricing and Availability in App Store Connect. If app availability already exists, switch to `asc pricing availability edit --app "APP_ID" ...` for later territory changes. ## Known UI Automation Issues ### "New App" is a dropdown menu, not a direct action The first click opens a menu with "New App" and "New App Bundle". You must click the menu item, not just the button. ### User Access radio buttons have span overlays Apple's custom radio buttons wrap the `<input type="radio">` in styled `<span>` elements. Direct ref-based clicks may fail with "click target intercepted". The fix is: 1. Scroll the radio element into view (`scrollIntoView`). 2. Click the radio ref directly (not via offset or label click). ### Bundle ID dropdown loads asynchronously After selecting a platform, the Bundle ID dropdown shows "Loading..." and is disabled. Wait for it to become enabled and populated before selecting. ### browser_fill may not trigger form validation Apple's Ember.js forms use custom change handlers. `browser_fill` (atomic set) may not trigger validation. If the Create button stays disabled after filling all fields: - Retype the value slowly (character-by-character) in at least one text field. - Or click the field, clear it, and type slowly. ## Failure Handling - If any field or button cannot be located, stop and request user help. - Capture a screenshot and report the last known step. - Do not retry the Create click automatically. - On failure, the user should check the browser for validation errors (red outlines, inline messages). ## Notes - This skill is a workaround for a missing public API. Apple's docs explicitly state: "Don't use this API to create new apps; instead, create new apps on the App Store Connect website." - UI selectors can change w
Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit c079831
git clone https://github.com/rudrankriyam/app-store-connect-cli-skills git -C app-store-connect-cli-skills checkout c079831542f6
The author documents no install command, so this uses the repository directly. Our verdict covers commit c079831542f6 only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Cursor | Mentioned in its text, not tested | Skills for Cursor · About Cursor |
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
c079831542f6
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/rudrankriyam/asc-app-create-ui/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
All automation skills →rorkai/app-store-connect-cli-skills
Set territory-specific pricing for subscriptions and in-app purchases using current asc setup, pricing summary, price import, and price schedule commands. Use when adjusting prices by country or implementing localized…
rorkai/app-store-connect-cli-skills
Orchestrate App Store releases with asc, including staging a version, uploading or building an artifact, publishing, and submitting for review. Use when the user wants to prepare or execute a release. Keep Game Center…
rudrankriyam/app-store-connect-cli-skills
Orchestrate App Store releases with asc, including staging a version, uploading or building an artifact, publishing, and submitting for review. Use when the user wants to prepare or execute a release. Keep Game Center…
rudrankriyam/app-store-connect-cli-skills
Reconcile App Store Connect subscriptions and in-app purchases with RevenueCat products, entitlements, offerings, and packages using asc and RevenueCat MCP. Use when setting up or syncing subscription catalogs across…
rorkai/app-store-connect-cli-skills
Archive, export, and notarize macOS apps using xcodebuild and asc. Use when you need to prepare a macOS app for distribution outside the App Store with Developer ID signing and Apple notarization.
rudrankriyam/app-store-connect-cli-skills
Set territory-specific pricing for subscriptions and in-app purchases using current asc setup, pricing summary, price import, and price schedule commands. Use when adjusting prices by country or implementing localized…
Add this badge to your README
[](https://modelsatlas.com/skills/rudrankriyam/asc-app-create-ui/)
<a href="https://modelsatlas.com/skills/rudrankriyam/asc-app-create-ui/"><img src="https://modelsatlas.com/skills/rudrankriyam/asc-app-create-ui/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about asc-app-create-ui
What does the asc-app-create-ui skill do?
Is asc-app-create-ui safe to install?
What can asc-app-create-ui access on my machine?
Which assistants does asc-app-create-ui work with?
How current is this page?
Sources
- github.com/rudrankriyam/app-store-connect-cli-skills/tree/main/s — the audited source at commit c079831542f6 and every finding aboveObserved · 20 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the asc-app-create-ui skill do?
- Is asc-app-create-ui safe to install?
- What can asc-app-create-ui access on my machine?