charleswiltgen/axiom/axiom-shipping

Shipping & App Store

You MUST use this skill when preparing to submit ANY app, handling App Store rejections, or working on release workflow.

Bundled tools on Claude Code: if command -v <tool> finds nothing (hooks off or --bare), use <plugin-root>/tools/<tool> in place of the bare name; <plugin-root> is two levels above this skill's Base directory for this skill: path.

<!-- AXIOM_AUDITOR_INLINE_BEGIN — rewritten for Codex by scripts/build-codex.ts; do not hand-edit -->

Auditors are skills here. Where this router says "Launch some-auditor agent", invoke the

matching Codex skill instead — same procedure, no Claude Code agent required.

Available: axiom-audit-iap, axiom-scan-security-privacy.

The ones that shell out — builds, tests, simulators, crash symbolication — need shell access to run.

<!-- AXIOM_AUDITOR_INLINE_END -->

When to Use

Use this skill when you encounter:

• Preparing an app for App Store submission
• App Store rejection (any guideline)
• Metadata requirements (screenshots, descriptions, keywords)
• Privacy manifest and nutrition label questions
• Age rating and content classification
• Export compliance and encryption declarations
• EU DSA trader status
• Account deletion or Sign in with Apple requirements
• Build upload and processing issues
• App Review appeals
• WWDC25/WWDC26 App Store Connect changes
• First-time submission workflow

Quick Reference

Routing Logic

1. Pre-Submission Preparation → app-store-submission

Triggers:

• "How do I submit my app?"
• "What do I need before submitting?"
• Preparing for first submission
• Pre-flight checklist needed
• Screenshot requirements
• Metadata completeness check
• Encryption compliance questions
• Accessibility Nutrition Labels
• Privacy manifest requirements for submission

Why app-store-submission: Discipline skill with 8 anti-patterns, decision trees, and pressure scenarios. Prevents the mistakes that cause 90% of rejections.

Reference: skills/app-store-submission.md

2. Metadata, Guidelines, and API Reference → app-store-ref

Triggers:

• "What fields are required in App Store Connect?"
• "What's the max length for app description?"
• Specific guideline number lookup
• Privacy manifest schema details
• Age rating tiers and questionnaire
• IAP submission metadata
• EU DSA compliance details
• Build upload methods
• WWDC25 and WWDC26 changes to App Store Connect

Why app-store-ref: 11-part reference covering every metadata field, guideline, and compliance requirement with exact specifications.

Reference: skills/app-store-ref.md

3. Rejection Troubleshooting → app-store-diag

Triggers:

• "My app was rejected"
• "Guideline 2.1 rejection"
• "Binary was rejected"
• Guideline 4.2 or 4.3 rejection (app too simple, web wrapper, spam, duplicate)
• Guideline 1.x rejection (objectionable content, UGC moderation, Kids category)
• How to respond to a rejection
• Writing an appeal
• Understanding rejection messages
• Third or repeated rejection
• Resolution Center communication

Why app-store-diag: 9 diagnostic patterns mapping rejection types to root causes and fixes, including subjective rejections (4.2/4.3, 1.x). Includes appeal writing guidance and crisis scenario for repeated rejections.

Reference: skills/app-store-diag.md

4. Privacy & Security Compliance → security-privacy-scanner (Agent)

Triggers:

• "Scan my code for privacy issues before submission"
• Hardcoded API keys or secrets
• Missing privacy manifest
• Required Reason API declarations
• ATS violations

Why security-privacy-scanner: Autonomous agent that scans for security vulnerabilities and privacy compliance issues that cause rejections.

Invoke: axiom-scan-security-privacy

5. IAP Review Issues → iap-auditor (Agent)

Triggers:

• IAP rejected or not working
• Missing transaction.finish()
• Missing restore purchases
• Subscription tracking issues

Why iap-auditor: Scans IAP code for the patterns that cause StoreKit rejections.

Invoke: axiom-audit-iap

6. Screenshot Validation → screenshot-validator (Agent)

Triggers:

• "Check my App Store screenshots"
• "Are my screenshots the right dimensions?"
• "Validate screenshots before submission"
• "Review my marketing screenshots"
• Screenshot content or dimension questions

Why screenshot-validator: Multimodal agent that visually inspects each screenshot for placeholder text, wrong dimensions, debug artifacts, broken UI, and competitor references. Catches issues that manual review misses.

Invoke: axiom-validate-screenshots

7. Programmatic ASC Access → asc-mcp

Triggers:

• "Automate App Store Connect"
• "Submit build programmatically"
• "Manage TestFlight from Claude"
• "Respond to reviews via API"
• "Set up asc-mcp"
• "Distribute to TestFlight groups via MCP"
• "Create a new version without opening ASC"

Why asc-mcp: Workflow-focused skill teaching Claude to use asc-mcp MCP tools for release pipelines, TestFlight distribution, review management, and feedback triage — all without leaving Claude Code.

Reference: skills/asc-mcp.md

8. Post-Submission Monitoring → app-store-connect-ref

Triggers:

• "How do I view crash data in App Store Connect?"
• "Where are my TestFlight crash reports?"
• "How do I read ASC metrics dashboards?"
• Post-release crash investigation
• Downloading crash logs from ASC

Why app-store-connect-ref: ASC navigation for crash dashboards, TestFlight feedback, performance metrics, and data export workflows.

Reference: skills/app-store-connect-ref.md

9. Beta Crash Triage → testflight-triage

Triggers:

• Beta tester reports a crash
• Crash appears in Organizer or App Store Connect
• Crash logs need symbolication
• Post-release crash investigation (single file or Organizer)

Why testflight-triage: Systematic crash triage from symbolication through root cause analysis. Uses xcsym as the first step (parse → discover dSYMs → symbolicate → categorize with pattern_tag → emit structured JSON).

Reference: skills/testflight-triage.md. For the xcsym subcommand/exit-code reference, see axiom-tools (skills/xcsym-ref.md). For the one-call agent workflow, axiom-analyze-crash.

10a. Production Corpus Triage → production-triage / triage-analyzer

Triggers:

• "Triage my Sentry crashes"
• "What are the top crash families in production?"
• "Show me which issues to fix first from App Store Connect"
• Multiple grouped issues from an aggregator (Sentry, ASC) — dozens of issues, not a single file
• "Which of these crashes are real bugs vs noise?"
• Corpus-level hang triage ("Are my ANR reports real blocks?")

Why production-triage: Corpus-level triage requires fetching from an aggregator, classifying each issue, noise-flagging suspension false-positives, and clustering into root-cause families. testflight-triage covers the Organizer path — single files and the local on-disk .xccrashpoint corpus; production-triage covers the aggregator path (Sentry / ASC grouped issues).

Reference: skills/production-triage.md (fetch + NormalizedReport schema + flag-never-hide rule). Agent: triage-analyzer or axiom-analyze-triage / axiom-analyze-triage.

10. Distribution Signing Issues → code-signing / code-signing-diag

Triggers:

• ITMS-90035 Invalid Signature on upload
• ITMS-90161 Invalid Provisioning Profile
• "No signing certificate found" when archiving
• Certificate expired before submission
• Archive succeeds but export/upload fails
• Profile doesn't match bundle ID
• Entitlement mismatch on upload

Why code-signing: Distribution signing errors are the #1 cause of upload failures. Diagnosing with CLI tools takes 5 minutes. code-signing-diag has 6 decision trees mapping ITMS errors to root causes.

Reference: See axiom-security (skills/code-signing-diag.md) (troubleshooting) or See axiom-security (skills/code-signing.md) (setup)

11. App Clips → app-clips

Triggers:

• Adding an App Clip target, or choosing an invocation method
• "What's the App Clip size limit?" / build exceeds maximum size
• Associated domains / AASA for App Clip links
• App Store Connect default and advanced launch experiences
• Handing App Clip data off to the full app on upgrade
• "My App Clip link does nothing"

Why app-clips: App Clips ship embedded in the full app and live under tight size (10/15/100 MB), entitlement, and capability limits. The discipline covers the size tiers, entitlements, AASA, and data handoff; the reference has the tables.

Reference: skills/app-clips.md, skills/app-clips-ref.md

Decision Tree