App Store Submission Auditor

Scans an iOS app project for App Store rejection risks. Reads source code directly — no back-and-forth. Auto-detects vibe coder vs developer and adapts language. Detects mid-build apps and asks before switching modes. Outputs a risk register, detailed findings with dynamic copy-paste fixes, reviewer experience checklist, draft App Store Connect reviewer notes, and a post-scan manual checklist. TRIGGER THIS SKILL for any of these — even if not explicitly asked: "audit my app" / "is my app ready" / "about to submit" / "submitting soon" / "about to launch" / "ready to ship" / "App Store review" /

33 stars 2 forksSoftware Development

Install

skills CLI (Claude Code, Cursor, Codex and more)

npx skills add itsncki-design/app-store-submission-auditor --skill app-store-submission-auditor

Manual install

git clone --depth 1 https://github.com/itsncki-design/app-store-submission-auditor.git /tmp/app-store-submission-auditor
mkdir -p ~/.claude/skills
cp -r /tmp/app-store-submission-auditor/. ~/.claude/skills/app-store-submission-auditor

Personal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.

From the SKILL.md

# App Store Submission Auditor

Scans a project folder for App Store rejection risks. No back-and-forth — read the code,
find the problems, report them. Adapts to the user's level and build state.

---

## First-time developer

If user mentions "first app", "first time submitting", "never submitted before", or
"new developer" → load `references/first-time-dev.md` and run that checklist first,
then continue with the full audit below.

---

## Config — check before scanning

Look for `config.json` in the skill directory. If it exists, read it for saved preferences
(stack, app type, subscription status, EU distribution, previous audit results).

If it does NOT exist, create it after the first audit with what was detected:

```json
{
  "mode": "vibe_coder",
  "stack": "flutter",
  "has_subscriptions": true,
  "has_social_features": true,
  "has_location": true,
  "eu_distribution": false,
  "first_time_submitter": false,
  "last_audit": "2026-03-19",
  "issues_fixed": []
}
```

On subsequent runs: load config, skip re-detection for anything already known, and note
"Last audit: [date] — you fixed [N] issues since then." if issues_fixed is populated.

---

## Gotchas — common false positives to avoid

These are the things Claude most often gets wrong when running this audit.
Check these before flagging any issue.

**1. Stripe for physical goods is fine**
Only flag Stripe/PayPal as a violation if it's being used for digital goods or features.

Read the full skill on GitHub

Details

Skill name: app-store-submission-auditor
Repository: itsncki-design/app-store-submission-auditor
Repo updated: 19 March 2026

FAQ

What does the App Store Submission Auditor skill do?

How do I install the App Store Submission Auditor skill?

skills CLI (Claude Code, Cursor, Codex and more): npx skills add itsncki-design/app-store-submission-auditor --skill app-store-submission-auditor. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.

Is App Store Submission Auditor popular?

It lives in itsncki-design/app-store-submission-auditor, which has 33 GitHub stars and 2 forks.

Related skills

Hardware Compliance

Platanor/hardware-compliance-handbook

Reference knowledge base on EU hardware/IoT cybersecurity law, maintained by Platanor Technologies — covering the Cyber Resilience Act (Regulation (EU) 2024/2847), the Radio Equipment Directive cybersecurity requirements (Directive 2014/53/EU, Delegated Regulation (EU) 2022/30 as amended, EN 18031), the NIS2 Directive (Directive (EU) 2022/2555), and the Cybersecurity Act / EUCC certification framework (Regulation (EU) 2019/881). Use this skill whenever the user asks anything about CRA compliance, essential cybersecurity requirements (Annex I), product risk classification (Default, Important Cl

Software Development

API Gateway

maton-ai/api-gateway-skill

Call third-party APIs through the Maton gateway, which injects the credential for an app the user has already connected. Use this skill when the user names a connected app and a concrete action in it - read a mailbox, query a CRM, file an issue, update a spreadsheet, run a query through a connected search or scraping provider. Every call goes to an app the user connected. It is not a general-purpose browser or network client, and it cannot reach a service with no Maton connection. It also manages event triggers, webhook destinations that forward event payloads to an external URL until deleted,

Software Development

Xint Rs

0xNyk/xint-rs

X Intelligence CLI for searching, monitoring, and analyzing X/Twitter from the terminal. Use for X/Twitter research prompts such as "search x", "find tweets about", "what's X saying", trend checks, follower diffs, real-time watch tasks, sentiment/report analysis, and bookmark-sync workflows. Best when recent community discourse matters (library/API changes, launches, market or cultural events). Supports search, watch, trends, bookmarks, likes/following (OAuth), Grok analysis, and JSON/JSONL/CSV/Markdown export. Non-goals: posting original tweets, DMs, or enterprise-only features.

Software Development

Singbox Config

shpirt/singbox-config

Generate, modify, migrate, and debug version-aware sing-box client configuration files for v1.13 and v1.14. Covers TUN and system proxy modes for end-user devices (SFM/SFA/SFI/CLI), RealIP vs FakeIP TUN templates, DNS/routing split rules, remote rule-set downloads, Clash API selectors, and node conversion for VLESS/VMess/Shadowsocks/Trojan/Hysteria2/TUIC/ShadowTLS/AnyTLS. Use when the user mentions sing-box, singbox, SFM/SFA/SFI, TUN/system proxy setup, split routing, DNS hijack, FakeIP, selector behavior, per-app routing, network strategy, TLS fragment/ECH, proxy chaining, or asks to create,

Software Development

Betaflight

SebGalina/betaflight-claude-skill

Use whenever the user mentions Betaflight, FPV drone firmware, flight-controller config, PID/filter/rates tuning, or blackbox log analysis — or shares a Betaflight artifact: a CLI diff/dump (lines like 'diff all', 'set ', 'feature ', 'resource ') or a .bbl/.bfl blackbox log, even when not named as such — or runs a chirp tuning session via Sweep Studio / FPVLogForge (a chirp log ID to analyse, 'analyse log', 'résultat chirp', iterative Bode/step/Ms tuning). Covers flight symptoms (oscillations, wobble, propwash, jello, hot motors, drift), motor/ESC and RX/ELRS/CRSF setup, builds from 3" to 10"

Software Development

Jev Anything

grandamenium/jev-anything

Use when the user wants to add Jev (TypeSafe's System One decision model) to anything: a classifier, router, scorer, guardrail, extractor, or any "smart if-statement" in their code or workflow. Triggers include "add jev", "jev classifier", "route/score/classify/grade/guardrail with jev", "put a decision layer in", or "jev-anything". Works even when the user does not understand Jev yet: this skill makes you interrogate, educate, and plan with them first, then scaffold a working Jev layer through TypeSafe's direct API or OpenRouter.

Software Development

Browse the most popular Claude skills, all software development skills, or write your own with the skills generator.