The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the asc CLI to perform various system and network operations, including managing certificates, profiles, and bundle IDs. It also includes an asc signing run command that executes a child process (e.g., xcodebuild) within an isolated temporary keychain environment.
[EXTERNAL_DOWNLOADS]: The skill facilitates the synchronization of signing assets with a remote Git repository (e.g., github.com) using the asc signing sync command. This involves pushing and pulling sensitive assets like private keys and provisioning profiles to a well-known service.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data from local files that could be influenced by external sources.
Ingestion points: The skill reads device information from .asc/distribution/devices.json and provisioning profile metadata from .mobileprovision files.
Boundary markers: None are explicitly defined for the ingestion of these structured data files.
Capability inventory: The skill has capabilities to perform network requests to the App Store Connect API, write certificates/keys to the local filesystem, and execute subprocesses via xcodebuild.
Sanitization: The skill relies on the asc CLI's internal validation of JSON schemas and profile structures.

asc-signing-setup