Blitz is a native macOS application that connects AI agents to App Store Connect for managing and submitting iOS apps. Developers use it to control parts of the iOS release process, including simulator runs, in-app purchases, screenshots, TestFlight testers, and review submissions. The catalogue includes skills, an instruction, and an MCP connection for operating Blitz.
Borrowing it
Nothing to install: this file belongs to blitzdotdev/blitz-mac. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/blitzdotdev/blitz-mac/master/.claude/skills/asc-iap-attach/SKILL.mdgit clone --depth 1 https://github.com/blitzdotdev/blitz-macWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/blitzdotdev/blitz-mac/asc-iap-attach)<a href="https://agentmods.dev/skills/blitzdotdev/blitz-mac/asc-iap-attach"><img src="https://agentmods.dev/badge/skills/blitzdotdev/blitz-mac/asc-iap-attach/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/blitzdotdev/blitz-mac/asc-iap-attach"><img src="https://agentmods.dev/badge/skills/blitzdotdev/blitz-mac/asc-iap-attach.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00059 | $0.02709 |
| Opus 5.5 | $0.00024 | $0.01084 |
| Sonnet 5.5 | $0.00012 | $0.00542 |
| Haiku 4.5 | $0.00006 | $0.00271 |
Grade A, and why
asc-iap-attach scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
import json, os, urllib.request, sys How it starts
The opening of the file, as written. The whole thing — 252 lines — stays where its author put it; the contents beside it link to each section on GitHub.
asc iap attach
Use this skill to attach in-app purchases and/or subscriptions to an app version for App Store review. This is the equivalent of checking the boxes in the "Add In-App Purchases or Subscriptions" modal on the version page in App Store Connect.
When to use
- User is preparing an app version for submission and has IAPs or subscriptions to include
- User says "attach IAPs", "add subscriptions to version", "include in-app purchases for review", "select in-app purchases"
- The app version page in ASC shows an "In-App Purchases and Subscriptions" section with items to select
- IAPs/subscriptions have been created and are in "Ready to Submit" state
Background
Apple's official App Store Connect API (POST /v1/subscriptionSubmissions, POST /v1/inAppPurchaseSubmissions) returns FIRST_SUBSCRIPTION_MUST_BE_SUBMITTED_ON_VERSION for first-time IAP/subscription submissions. The reviewSubmissionItems API also does not support subscription or inAppPurchase relationship types.
This skill uses Apple's internal iris API (/iris/v1/subscriptionSubmissions) via cached web session cookies, which supports the submitWithNextAppStoreVersion attribute that the public API lacks. This is the same mechanism the ASC web UI uses when you check the checkbox in the modal.
Preconditions
- Web session file available at
~/.blitz/asc-agent/web-session.json. If no session exists or it has expired (401), call theasc_web_authMCP tool first — this opens the Apple ID login window in Blitz and captures the session automatically. - Know your app ID.
- IAPs and/or subscriptions already exist and are in Ready to Submit state.
- A build is uploaded and attached to the current app version.
Workflow
1. Check for an existing web session
test -f ~/.blitz/asc-agent/web-session.json && echo "SESSION_EXISTS" || echo "NO_SESSION"
- If
NO_SESSION: call theasc_web_authMCP tool first. Wait for it to complete before proceeding. - If
SESSION_EXISTS: proceed to the next step.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 252 lines · 59 tokens per session scan A cc0dce7e6e71
asc-iap-attach is a skill published in the GitHub repository blitzdotdev/blitz-mac (1,766 stars, last pushed 3mo ago), licensed Apache-2.0. It adds 59 tokens to every session and 2,709 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
asc-iap-attach compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| asc-iap-attachblitzdotdev/blitz-mac | Skill | 1.8k | 3mo ago | Apache-2.0 | A | 59 | Claude Code |
| appstore-ppp-pricingduceum/appstore-ppp-pricing-agent-skill | Skill | 52 | 2mo ago | MIT | A | 115 | Claude Code, Codex |
| asc-revenuecat-catalog-syncrorkai/app-store-connect-cli-skills | Skill | 1.1k | yesterday | MIT | A | 51 | Claude Code |
| app-rejection-recoveryEronred/aso-skills | Skill | 2.2k | 1mo ago | MIT | A | 168 | Claude Code |
| apple-search-adsEronred/aso-skills | Skill | 2.2k | 1mo ago | MIT | A | 127 | Claude Code |
| attribution-setupEronred/aso-skills | Skill | 2.2k | 1mo ago | MIT | A | 201 | Claude Code |
| custom-product-pagesEronred/aso-skills | Skill | 2.2k | 1mo ago | MIT | A | 157 | Claude Code |