The Agent Skills Directory

[SAFE]: The skill serves a clear, legitimate purpose for iOS developers and follows documented platform best practices for StoreKit 2 implementation.
[COMMAND_EXECUTION]: The skill uses Glob and Grep tools solely for project context detection (e.g., finding existing StoreKit files) and Bash for file system operations related to code generation. These are standard capabilities for a code generator skill and are used safely within the defined scope.
[EXTERNAL_DOWNLOADS]: The generated code in OfferSignatureProvider.swift includes a network request to a placeholder URL (your-server.com). This is a documented functional requirement for Apple's Promotional Offers, which necessitate a server-side signature for security. The skill correctly identifies this as a necessary integration point for the developer.
[DATA_EXFILTRATION]: While the generated code transmits product and offer identifiers to a server, this is the intended and required behavior for validating subscription offers through Apple's signature process. No unauthorized access to sensitive local files or environment variables was observed.

subscription-offers