minosdevs

Appstore Approval Audit — Security skill for Claude Code

Security community

Pass Apple review on the first try - a Claude Code skill that audits your iOS app (Swift, Expo/RN, Flutter) before App Store submission.

How to install Appstore Approval Audit

This entry records only its repository, not the path inside it, so there is no exact command to give. Open minosdevs/appstore-approval-audit and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Appstore Approval Audit does

Pass Apple review on the first try - a Claude Code skill that audits your iOS app (Swift, Expo/RN, Flutter) before App Store submission.

Alternatives in Security

Maestro Knowledge — Intent-driven knowledge-store and Run knowledge lifecycle management — audit/prune, stage candidates (with sig 530 ★
Bountyforge — All-round bug bounty skill for Claude Code parallelized agents for smart contract audits (EVM, Move, Solana, T 399 ★
Memory Self Review — Mine recent agent history (claude-mem + usage stats) for recurring failures and repeated patterns, audit MEMOR 297 ★

README

appstore-approval-audit

**[Version française](README.fr.md)**

**Pass Apple review on the first try.**

A [Claude Code](https://claude.com/claude-code) skill that audits your iOS app like the pickiest Apple reviewer would — and gives you a **GO / NO-GO** verdict with exact fixes, before you hit "Submit for Review".

**Works with any iOS stack** — native Swift/SwiftUI, Expo/React Native, or Flutter: it detects your stack first, then knows where to look in each one.

Forged while shipping a real iOS app (IAP + AI): every check comes from a trap hit in production, not from the docs.

What it checks

Purchases (3.1.1 / 3.1.2) — Restore on every paywall, prices from StoreKit, compliant free trial, legal links on the paywall, US external-link nuance
Privacy (5.1.1 / 5.1.2) — in-app account deletion, App Privacy label, explicit consent before sharing data with third-party AI (the Nov 2025 rule), third parties named in the privacy policy
Privacy Manifests — PrivacyInfo.xcprivacy + Required Reason APIs (the silent ITMS-91053 / ITMS-91061 upload rejections, enforced since 2024–2025)
Config traps — secrets in the bundle, export compliance, stray UIBackgroundModes, unjustified permissions
App nature (4.2 / 4.3 / 4.7) — minimum functionality, spam/duplicate, chatbot/UGC moderation
Flows the reviewer actually tests — dead-end funnels, password reset in a production build, timeouts, iPad, demo accounts
App Store Connect — "Missing Metadata" subscriptions, 404 legal pages, the new 4+/9+/13+/16+/18+ age system, dishonest metadata, the last 10 minutes before submit

Every check comes with a concrete grep/curl recipe — it audits by **evidence**, not from memory.

Install

# global (all your sessions)
git clone https://github.com/minosdevs/appstore-approval-audit ~/.claude/skills/appstore-approval-audit

# or per project
git clone https://github.com/minosdevs/appstore-approval-audit .claude/skills/appstore-app