Resources

One command. A full audit of your app.

The whole kit as clean Markdown — 99 docs across 10 thematic files — plus the App Review Squad: eight static-audit roles and an optional Runtime Reviewer beta — Mac validation pending that can build and inspect configured-target flows. A lower-cost Quick pass covers facts, privacy and payments. Mechanical permission, entitlement, privacy-manifest, build and IAP snapshot checks run before the agents. You get an immutable run where every finding cites source, App Store Connect, dated public-HTTP or runtime evidence, App Review Notes pre-filled from what was found, and reply drafts for the rejections you’re most likely to get.

Already bought? Unlock

The download is included with the kit. Buy once, then grab the ZIP or point your AI at the files.

How it works

One skill. Three run profiles.

Diagram showing Quick triage, the default eight-role Scan, and Review as Scan plus an opt-in Runtime Reviewer for the configured Simulator or physical-device target.
Quick is privacy/payments triage. Scan is the portable default. Review runs that same scan first, then adds explicit runtime coverage.

The App Review Squad

Install the kit in Claude Code and ask for an audit. Recon runs first, six specialists fan out in parallel, and a final agent merges everything into ./app-review-audit/runs/<run_id>/ — a bounded report, full findings index, REVIEW_NOTES.md ready to paste into App Store Connect, and REPLY_DRAFTS.md for the Resolution Center.

  1. 01 — Recon Identifies the stack, the app type and what the app actually does. Everything else keys off this.
  2. 02 — Completeness Reviewer access, demo account, launch crashes, placeholder content, iPad, dead links. Guideline 2.1.
  3. 03 — Privacy Purpose strings vs. APIs used, privacy manifest, Required Reason APIs, ATT, account deletion, labels. Guideline 5.1.
  4. 04 — Payments IAP vs. external payment, restore, paywall disclosure, trials, win-back, product ids. Guideline 3.1.
  5. 05 — Design WebView wrapper detection, minimum functionality, Sign in with Apple, hidden features. Guideline 4.2.
  6. 06 — Content risk User-generated content moderation, AI output, health claims, kids, age rating. Guideline 1.2.
  7. 07 — Metadata Description vs. reality, screenshots, keywords, export compliance, Review Notes. Guideline 2.3.
  8. Review mode — Runtime beta Mac validation pending: builds and launches the Simulator app, then walks declared critical flows with bounded UI automation.
  9. 08 — Report Merges, dedupes, ranks, and writes the report, the Review Notes and the reply drafts.

Every finding carries its evidence, the guideline, the kit fiche that covers it, and whether fixing it needs a new build — a large share of rejections are resolved in App Store Connect without shipping again. The reviewer never intentionally edits source and checks build drift. Review mode runs locally on your Mac with your Xcode, AI and credits, and only covers the configured target and flows named in its report. Physical-device and matched-TestFlight targets remain experimental; untested paths stay explicit. No kit promises approval.

Install it in your tool

Download and unzip — you get a app-store-approval-kit/ folder. Then, depending on where you code:

Claude Code
Drop the folder into .claude/skills/ (in your project, or ~/.claude/ for every project). Claude invokes it on its own whenever you mention an App Store rejection. Then say “run a full App Store audit of this app” — or copy audit/claude-code/app-audit.md to .claude/commands/ and just type /app-audit.
Claude.ai / Desktop
Add the files to a Project, or attach them to the conversation.
Cursor
Attach the .md files with @, or paste index.md into your rules. (No skills here — so no .claude/skills/.)
ChatGPT / Codex
Attach the folder (or just the files you need) and ask your question.

Outside Claude Code, the squad runs too — Cursor and Claude.ai walk the same agents in sequence instead of in parallel. Start from audit/README.md. For a one-off question rather than a full audit, point your AI at SKILL.md or index.md — both map every file, so it reads only what’s relevant and keeps token usage low.

What’s inside

  • SKILL.md Installable agent-skill manifest (drop the folder into .claude/skills/).
  • index.md Map of the kit + how to use it with an AI.
  • before-submit.md Pre-submission checklists, self-audit, App Store Connect field guide and glossary — do these before hitting Submit. 12 docs
  • by-app-type.md Where AI, subscription, WebView, no-code, crypto and UGC apps get rejected — and the pre-submit must-dos for each. 13 docs
  • ai-prompts.md Copy-paste prompts to audit your build with Claude Code / Cursor before Apple does. 6 docs
  • fixes-1-safety.md Rejections under Guideline 1 — objectionable / UGC content moderation, broken links, and data security / ATS. 4 docs
  • fixes-2-availability-completeness.md Rejections under Guideline 2 — demo access, crashes, placeholder content, backend availability, IAP completeness. 14 docs
  • fixes-3-payments.md Rejections under Guideline 3 — in-app purchase rules, subscriptions, external payments, business model. 11 docs
  • fixes-4-design.md Rejections under Guideline 4 — minimum functionality, spam/copycat, WebView wrappers, iPad compatibility. 6 docs
  • fixes-5-legal-privacy.md Rejections under Guideline 5 — privacy policy, privacy labels, purpose strings, account deletion, ATT, export compliance, and Developer Code of Conduct (5.6) issues like manipulative paywalls and rating prompts. 13 docs
  • fixes-other.md Process-level issues — Resolution Center replies, appeals, unresolved-issue loops, and cross-guideline rejections. 5 docs
  • templates.md Review Notes, rejection replies, clarifications, appeals and re-review requests — copy, fill the brackets, send. 15 docs
  • audit/ The App Review Squad — 8 static roles, optional Runtime Reviewer, guardrails and templates. 31 files
  • LICENSE.md Your licence, in the folder: lifetime, yours and your clients’ projects included, not for redistribution. Full Terms.