asc-signing-setup
Set up bundle IDs, capabilities, signing certificates, provisioning profiles, and encrypted signing sync with the asc cli. Use when onboarding a new app, rotating signing assets, or sharing them across a team.
Security Assessment
About asc-signing-setup
The asc-signing-setup skill helps developers create, manage, renew, and share Apple platform signing assets required for iOS and macOS application development and distribution. It provides a structured workflow for setting up bundle identifiers, enabling app capabilities, generating signing certificates, creating provisioning profiles, and installing or inspecting profiles locally. The skill is designed to simplify the often complex process of configuring Apple code signing infrastructure while ensuring that applications are properly prepared for development, testing, and App Store distribution.
Key capabilities include bundle ID creation and management, configuration of platform capabilities such as iCloud settings, certificate creation using existing or generated certificate signing requests (CSRs), and provisioning profile creation for different distribution scenarios. The skill also supports downloading, inspecting, installing, auditing, revoking, and cleaning signing assets. In addition, it includes encrypted team-based asset synchronization through `asc signing sync`, allowing certificates and provisioning profiles to be securely stored and shared through a git repository using password-based encryption.
This skill is intended for iOS and macOS developers, release engineers, DevOps engineers, and development teams responsible for application signing and distribution. Common use cases include onboarding a new application, rotating expiring certificates, generating new provisioning profiles, auditing outdated signing assets, cleaning local development environments, and maintaining a shared signing infrastructure across a team. It is particularly useful for teams seeking a lightweight alternative to more complex certificate-sharing workflows while retaining secure, encrypted storage of signing assets.
FAQ
What prerequisites are required before using this skill?
Authentication must be configured using `asc auth login` or ASC environment variables. You should also know the target bundle identifier and platform, and have a CSR available or use the built-in CSR generation option.
Can this skill create both certificates and provisioning profiles?
Yes. The workflow includes creating signing certificates, generating CSRs when needed, creating provisioning profiles, downloading profiles, and installing or inspecting them locally.
Does the skill support sharing signing assets across a team?
Yes. The `asc signing sync` workflow allows encrypted certificates and provisioning profiles to be pushed to and pulled from a git repository for team use.
Is profile expiration auditing based only on the profile state?
No. The documentation notes that the Apple `profileState` value may not accurately indicate expiration. Expiration audits should compare the profile expiration date against the current date.
What happens when signing assets are pulled from shared storage?
The pull operation decrypts and writes files to a local directory. Importing certificates into a keychain or installing provisioning profiles must be performed separately.
Install asc-signing-setup
Quick Setup:
- Copy the skill folder to
.claude/skills/ - Claude will automatically detect and use the skill