Agent skill · Audited from source
asc-subscription-localization
skill · rudrankriyam/app-store-connect-cli-skillsMIT licenceAudited 31 Oct 2026 · source 2b8a88b29324
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 2b8a88b29324 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Bulk-localize subscription, subscription-group, and in-app purchase display names across App Store locales using asc, including API 4.4.1 version-scoped v2 resources. Use when filling or updating subscription/IAP names…
Cite
Cite this page
ModelsAtlas. “asc-subscription-localization (rudrankriyam/app-store-connect-cli-skills)”. Retrieved 31 Oct 2026. https://modelsatlas.com/skills/rudrankriyam/asc-subscription-localization
2 skills are called “asc-subscription-localization”. You are viewing rudrankriyam/app-store-connect-cli-skills.
- rudrankriyam/app-store-connect-cli-skills★ 1.1k✓SAFE
- rorkai/app-store-connect-cli-skills★ 1.1k✓SAFE
Trust audit
Audit 0.4.1 · source read 31 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (0)
No findings at any severity. We re-audit when the source changes.
Audit 0.4.1 · source sha 2b8a88b29324 · 31 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherrudrankriyam GitHub organizationOwner of the repository this skill is read from
- Source folderrudrankriyam/app-store-connect-cli-skills/skills/asc-subscription-localizationThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict2b8a88b29324A new audit runs when the source changes
- Repository statusNot archivedLast push 4 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Bulk-localize subscription, subscription-group, and in-app purchase display names across App Store locales using asc, including API 4.4.1 version-scoped v2 resources. Use when filling or updating subscription/IAP names…
--- name: asc-subscription-localization description: Bulk-localize subscription, subscription-group, and in-app purchase display names across App Store locales using asc, including API 4.4.1 version-scoped v2 resources. Use when filling or updating subscription/IAP names and descriptions without App Store Connect UI work. --- # asc subscription localization Use this skill to bulk-create or bulk-update display names and, where supported, descriptions for subscriptions, subscription groups, and in-app purchases across all App Store Connect locales. This eliminates the tedious manual process of clicking through each language in App Store Connect to set the same display name. ## Preconditions - Auth configured (`asc auth login` or `ASC_*` env vars). - Know your app ID (`ASC_APP_ID` or `--app`). - Subscription groups and subscriptions already exist. ## Choose the API scope first API 4.4.1 adds discrete versions for IAPs, subscriptions, and subscription groups. A version ID is different from its product, subscription, or group ID. - Use `asc ... versions localizations ...` for all new localization work. - Do not use the product- or group-scoped v1 localization commands. API 4.4.1 deprecates those resources, and the CLI now emits migration warnings for their compatibility commands. - Never pass a product, subscription, or group ID to a version-scoped command. Resolve or create versions before localizing them: ```bash asc iap versions list --iap-id "IAP_ID" --state PREPARE_FOR_SUBMISSION --paginate --output table asc subscriptions versions list --subscription-id "SUB_ID" --state PREPARE_FOR_SUBMISSION --paginate --output table asc subscriptions groups versions list --group-id "GROUP_ID" --state PREPARE_FOR_SUBMISSION --paginate --output table ``` Branch independently on each list result: zero matches means create, one means reuse that version ID, and more than one means stop and require an explicit version ID. Run each command below only for its zero-match branch: ```bash # If and only if the IAP version list returned zero matches: asc iap versions create --iap-id "IAP_ID" --output json # If and only if the subscription version list returned zero matches: asc subscriptions versions create --subscription-id "SUB_ID" --output json # If and only if the group version list returned zero matches: asc subscriptions groups versions create --group-id "GROUP_ID" --output json ``` None of the three version families has a version delete command. List and reuse the single `PREPARE_FOR_SUBMISSION` version; create only for zero matches, and stop for an explicit ID when multiple matches exist. Live parent deletion did not cascade IAP or subscription versions, so do not assume parent deletion cleans up versions created for testing. ## Supported App Store Locales These are the locales supported by App Store Connect for subscription and IAP localizations: ``` ar-SA, ca, cs, da, de-DE, el, en-AU, en-CA, en-GB, en-US, es-ES, es-MX, fi, fr-CA, fr-FR, he, hi, hr, hu, id, it, ja, ko, ms, nl-NL, no, pl, pt-BR, pt-PT, ro, ru, sk, sv, th, tr, uk, vi, zh-Hans, zh-Hant ``` ## Import many locales from one file For bulk writes, map each locale to its fields in one JSON file and import it into the resolved version ID. Import creates missing locales, updates only differing fields, never clears or deletes, and reports per-locale failures. ```bash asc subscriptions versions localizations import --version-id "VERSION_ID" --file "./localizations.json" --dry-run asc subscriptions versions localizations import --version-id "VERSION_ID" --file "./localizations.json" --confirm ``` `asc iap versions localizations import` takes the same `name` and `description` fields. `asc subscriptions groups versions localizations import` takes `name` and `customAppName`. Give every new subscription or IAP locale a non-empty `description`; see the create rules below. ## Workflow: Bulk-localize a subscription version (v2) List existing localizations, create only missing locales, then verify: ```bash asc subscriptions versions localizations list --version-id "VERSION_ID" --paginate --output table asc subscriptions versions localizations create --version-id "VERSION_ID" --locale "LOCALE" --name "Display Name" --description "Description" asc subscriptions versions localizations list --version-id "VERSION_ID" --paginate --output table ``` Updates distinguish omitted values, non-empty strings, and JSON `null`: ```bash asc subscriptions versions localizations update --id "LOC_ID" --name "New Name" --description "Updated description" ``` Do not combine a value flag with its matching `--clear-name` or `--clear-description` flag. The 4.4.1 schema permits JSON `null`, but Apple's live service currently rejects both an empty `--description` and `--clear-description` for subscription-version localizations because the description must contain at least one character. Creating a missing subscription-version localization therefore requires a non-empty description. A display-name-only run may update the name of an existing localization, but must not create a missing locale until the user provides a non-empty locale-specific or shared fallback description. ## Workflow: Bulk-localize a subscription group version (v2) ```bash asc subscriptions groups versions localizations list --version-id "VERSION_ID" --paginate --output table asc subscriptions groups versions localizations create --version-id "VERSION_ID" --locale "LOCALE" --name "Group Display Name" --custom-app-name "My App" asc subscriptions groups versions localizations update --id "LOC_ID" --name "Updated Group Display Name" --custom-app-name "My App" asc subscriptions groups versions localizations list --version-id "VERSION_ID" --paginate --output table ``` Clearing metadata is a separate, explicit opt-in operation. After confirming that the user wants to remove an existing custom app name, run: ```bash asc subscriptions groups versions localizations update --id "LOC_ID" --clear-c
Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 2b8a88b
git clone https://github.com/rudrankriyam/app-store-connect-cli-skills git -C app-store-connect-cli-skills checkout 2b8a88b29324
The author documents no install command, so this uses the repository directly. Our verdict covers commit 2b8a88b29324 only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
2b8a88b29324
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/rudrankriyam/asc-subscription-localization/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
All automation skills →rorkai/app-store-connect-cli-skills
Bulk-localize subscription, subscription-group, and in-app purchase display names across App Store locales using asc, including API 4.4.1 version-scoped v2 resources. Use when filling or updating subscription/IAP names…
rorkai/app-store-connect-cli-skills
Orchestrate TestFlight distribution, groups, testers, and What to Test notes using asc. Use when rolling out betas.
rudrankriyam/app-store-connect-cli-skills
Orchestrate TestFlight distribution, groups, testers, and What to Test notes using asc. Use when rolling out betas.
rudrankriyam/app-store-connect-cli-skills
Submit or update a Wall of Apps entry in the App-Store-Connect-CLI repository using `asc apps wall submit`. Use when the user says "submit to wall of apps", "add my app to the wall", or "wall-of-apps".
rorkai/app-store-connect-cli-skills
Reconcile App Store Connect subscriptions and in-app purchases with RevenueCat products, entitlements, offerings, and packages using asc and RevenueCat MCP. Use when setting up or syncing subscription catalogs across…
rorkai/app-store-connect-cli-skills
Resize and validate App Store screenshots with current asc screenshot-size data and macOS sips. Use when preparing or fixing screenshots for App Store Connect submission.
Add this badge to your README
[](https://modelsatlas.com/skills/rudrankriyam/asc-subscription-localization/)
<a href="https://modelsatlas.com/skills/rudrankriyam/asc-subscription-localization/"><img src="https://modelsatlas.com/skills/rudrankriyam/asc-subscription-localization/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about asc-subscription-localization
What does the asc-subscription-localization skill do?
Is asc-subscription-localization safe to install?
What can asc-subscription-localization access on my machine?
How current is this page?
Sources
- github.com/rudrankriyam/app-store-connect-cli-skills/tree/main/s — the audited source at commit 2b8a88b29324 and every finding aboveObserved · 31 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the asc-subscription-localization skill do?
- Is asc-subscription-localization safe to install?
- What can asc-subscription-localization access on my machine?