appstore-approval-audit

Version française

Pass Apple review on the first try.

A Claude Code skill that audits your iOS app like the pickiest Apple reviewer would — and gives you a GO / NO-GO verdict with exact fixes, before you hit "Submit for Review".

Works with any iOS stack — native Swift/SwiftUI, Expo/React Native, or Flutter: it detects your stack first, then knows where to look in each one.

Forged while shipping a real iOS app (IAP + AI): every check comes from a trap hit in production, not from the docs.

What it checks

• Purchases (3.1.1 / 3.1.2) — Restore on every paywall, prices from StoreKit, compliant free trial, legal links on the paywall, US external-link nuance
• Privacy (5.1.1 / 5.1.2) — in-app account deletion, App Privacy label, explicit consent before sharing data with third-party AI (the Nov 2025 rule), third parties named in the privacy policy
• Privacy Manifests — PrivacyInfo.xcprivacy + Required Reason APIs (the silent ITMS-91053 / ITMS-91061 upload rejections, enforced since 2024–2025)
• Config traps — secrets in the bundle, export compliance, stray UIBackgroundModes, unjustified permissions
• App nature (4.2 / 4.3 / 4.7) — minimum functionality, spam/duplicate, chatbot/UGC moderation
• Flows the reviewer actually tests — dead-end funnels, password reset in a production build, timeouts, iPad, demo accounts
• App Store Connect — "Missing Metadata" subscriptions, 404 legal pages, the new 4+/9+/13+/16+/18+ age system, dishonest metadata, the last 10 minutes before submit

Every check comes with a concrete grep/curl recipe — it audits by evidence, not from memory.

Install

# global (all your sessions)
git clone https://github.com/minosdevs/appstore-approval-audit ~/.claude/skills/appstore-approval-audit

# or per project
git clone https://github.com/minosdevs/appstore-approval-audit .claude/skills/appstore-approval-audit

Usage

In Claude Code, at the root of your iOS app:

/appstore-approval-audit

or just tell it: "audit my app before the App Store submission".

You get a structured report: verdict, findings ranked BLOCKER / HIGH / MEDIUM / LOW (with file:line and estimated fix), the critical path in unblocking order, and the last-10-minutes checklist.

Structure

SKILL.md                       <- the skill (5-pass audit method)
references/
  guidelines-rejets.md         <- the guidelines that actually reject, trap by trap, with change dates
  privacy-manifest.md          <- Required Reason APIs, reason codes, ITMS codes, per stack
  grep-recipes.md              <- concrete detection commands (grep/curl) per check
  asc-checklist.md             <- App Store Connect field by field + reviewer notes template
  rapport-audit.md             <- the report output format

Why

A first Apple rejection costs 24-48h of review time — plus your momentum. Most rejections don't come from code: legal pages returning 404, Restore missing on a secondary paywall, subscriptions not selected with the version, inconsistent privacy label, or a silent ITMS-91053 upload rejection because one Required Reason API wasn't declared. This skill catches all of it before Apple does.

---

MIT · built by @minosdevs — building in public, come say hi.