← Browse

@cruisediary/apple-app-review-skills

A

App Store rejection prevention for iOS/macOS apps. Covers privacy, UGC, IAP, metadata, layout, and quality checks based on real Apple rejection cases.

skillclaude

Install

agr install @cruisediary/apple-app-review-skills --target claude

Writes 10 files into .claude/skills/, pinned to git-0c905b01.

  • .claude/skills/apple-app-review-skills/.gitattributes
  • .claude/skills/apple-app-review-skills/.gitignore
  • .claude/skills/apple-app-review-skills/CHANGELOG.md
  • .claude/skills/apple-app-review-skills/CLAUDE.md.example
  • .claude/skills/apple-app-review-skills/CODE_OF_CONDUCT.md
  • .claude/skills/apple-app-review-skills/CONTRIBUTING.md
  • .claude/skills/apple-app-review-skills/LICENSE
  • .claude/skills/apple-app-review-skills/README.md
  • .claude/skills/apple-app-review-skills/SKILL.md
  • .claude/skills/apple-app-review-skills/install.sh

Document


name: apple-app-review-skills description: > App Store rejection prevention for iOS/macOS apps. Covers privacy, UGC, IAP, metadata, layout, and quality checks based on real Apple rejection cases. compatibility: Claude Code (or similar products) version: 1.0.0

apple-app-review-skills

A Claude Code skill set for iOS/macOS App Store rejection prevention. Skills across 7 categories, grounded in real Apple rejection cases and official guidelines (sections 1–5).

When to Use This Skill Set

Use these skills when:

  • Preparing an iOS/macOS app for App Store submission
  • Investigating a rejection or appeal
  • Referencing an Apple guideline section (1.x – 5.x)
  • Auditing privacy, UGC, IAP, metadata, layout, or code quality

Routing

Identify the user's intent, then load only the matching skill — never load all skills at once.

Full audit → run the agent

If the user wants a complete pre-submission check: → Use agents/appstore-full-audit.md

Targeted agents → scoped multi-skill audit

For category-scoped audits that run multiple skills together:

User needAgent
All iPad layout, Dynamic Type, orientation, safe area checksagents/ipad-layout-agent.md
All permission string and timing checksagents/permission-audit-agent.md
All privacy policy, manifest, ATT, account deletion checksagents/privacy-audit-agent.md
All UGC report/block/filter checksagents/ugc-safety-agent.md

Targeted → load one skill by category

CategoryWhen to route hereSkills
qualityPrivate/deprecated APIs, SDK version, push notifications, review manipulation, background execution, crash risk, app completeness, submission readinesssdk-version-check, private-api-audit, push-notification-audit, review-request-audit, background-execution-audit, crash-risk-audit, app-completeness-check, review-readiness-check
privacyAI data sharing consent, PrivacyInfo.xcprivacy, ATT, data minimization, account deletion, privacy policyai-data-disclosure, privacy-manifest-check, att-framework-audit, data-minimization-audit, account-deletion-check, privacy-policy-check
businessIn-app purchases, Sign in with Apple, loot boxes, subscriptionsiap-compliance, sign-in-with-apple, loot-box-disclosure, subscription-disclosure
metadataApp Store description, screenshots, age rating, app namemetadata-accuracy, age-rating-accuracy, app-name-compliance, screenshot-guidelines
ugcUser-generated content moderation, report/block featuresugc-safety-features, content-moderation-api
layoutiPad layout, Dynamic Type, orientation, safe areasipad-layout-audit, dynamic-type-support, orientation-support, safe-area-compliance
permissionsNSUsageDescription strings, permission timing, scopeusage-description-audit, permission-scope-audit, request-timing-audit

Total: 8 + 6 + 4 + 4 + 2 + 4 + 3 = 31 skills

Routing Examples

User saysRoute to
"Check my app before App Store submission"agents/appstore-full-audit.md
"Is my UIWebView usage going to cause rejection?"skills/quality/sdk-version-check.md
"Do I need to disclose that I'm using OpenAI?"skills/privacy/ai-data-disclosure.md
"My push notification was rejected"skills/quality/push-notification-audit.md
"Does my subscription paywall comply?"skills/business/subscription-disclosure.md
"I use Facebook login — do I need Sign in with Apple?"skills/business/sign-in-with-apple.md
"My app has a chat feed — what UGC requirements apply?"skills/ugc/ugc-safety-features.md
"Check my iPad layout"skills/layout/ipad-layout-audit.md
"Review my privacy policy"skills/privacy/privacy-policy-check.md

Trustgrade A

  • passBody integrity

    Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.

  • passType matchnot applicable to this artifact type

    Whether the artifact is really the kind of thing its metadata claims it is.

  • passFreshness

    How long since the source repository was last pushed to.

  • passPrompt injection

    Scans the artifact's own text for instructions aimed at your agent rather than at you.

  • passLicense

    Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

  • Aevery check passed
  • Bone warning
  • Ctwo warnings
  • Dprompt injection or body integrity failed, or three warnings
  • Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.

Versions

  • git-0c905b01cf4d2026-07-31