Borrowing it
Nothing to install: this file belongs to web-casa/DeepSeek-Harness-Desktop. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/web-casa/DeepSeek-Harness-Desktop/main/.agents/skills/asc-signing-setup/SKILL.mdgit clone --depth 1 https://github.com/web-casa/DeepSeek-Harness-DesktopWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/web-casa/deepseek-harness-desktop/asc-signing-setup)<a href="https://agentmods.dev/skills/web-casa/deepseek-harness-desktop/asc-signing-setup"><img src="https://agentmods.dev/badge/skills/web-casa/deepseek-harness-desktop/asc-signing-setup/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/web-casa/deepseek-harness-desktop/asc-signing-setup"><img src="https://agentmods.dev/badge/skills/web-casa/deepseek-harness-desktop/asc-signing-setup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00046 | $0.02103 |
| Opus 5 | $0.00023 | $0.01052 |
| Sonnet 5 | $0.00009 | $0.00421 |
| Haiku 4.5 | $0.00005 | $0.00210 |
Grade B, and why
asc-signing-setup scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
chmod 600 "./signing-sync-password" "./distribution.p12" "./distribution-p12-password" This is a copy
100% identical to asc-signing-setup — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 169 lines — stays where its author put it; the contents beside it link to each section on GitHub.
asc signing setup
Use this skill when you need to create or renew signing assets for iOS/macOS apps.
Preconditions
- Auth is configured (
asc auth loginorASC_*env vars). - You know the bundle identifier and target platform.
- You have a CSR file for certificate creation, or you will let
asc certificates create --generate-csrcreate one.
Workflow
- Create or find the bundle ID:
asc bundle-ids list --paginateasc bundle-ids create --identifier "com.example.app" --name "Example" --platform IOS
- Configure bundle ID capabilities:
asc bundle-ids capabilities list --bundle "BUNDLE_ID"asc bundle-ids capabilities add --bundle "BUNDLE_ID" --capability ICLOUD- Add capability settings when required:
--settings '[{"key":"ICLOUD_VERSION","options":[{"key":"XCODE_6","enabled":true}]}]'
- For the Developer Portal-only
PRIVATE_CLOUD_COMPUTEcapability, use a user-owned web session and the Developer Portal Bundle ID resource ID:asc web bundle-ids capabilities enable --bundle-id "BUNDLE_RESOURCE_ID" --capability PRIVATE_CLOUD_COMPUTE --confirm- This capability is not available through the public App Store Connect
capability enum. If the cached session cannot access Developer Portal,
clear its scoped cache, then log in again with the same binary:
asc web auth logout --apple-id "[email protected]"asc web auth login --apple-id "[email protected]"
- For App Groups, the public API can enable
APP_GROUPSbut cannot create or associate App Group resources. Use an Account Holder or Admin web session:asc web app-groups list --paginate --output tableasc web app-groups create --name "Example Shared" --identifier "group.com.example.app.shared" --confirmasc web app-groups assign --group "GROUP_RESOURCE_ID" --bundle-id "BUNDLE_RESOURCE_ID" --confirm- Resolve the opaque group ID with
asc web app-groups listand the opaque Bundle ID resource ID withasc bundle-ids list. A changed assignment invalidates provisioning profiles containing that App ID, so regenerate affected profiles before the next signed build.
- Create a signing certificate:
asc certificates list --certificate-type IOS_DISTRIBUTIONasc certificates create --certificate-type IOS_DISTRIBUTION --csr "./cert.csr"- Or generate a key and CSR inline:
asc certificates create --certificate-type IOS_DISTRIBUTION --generate-csr --key-out "./signing/dist.key" --csr-out "./signing/dist.csr"
- For Wallet passes, create the Pass Type ID first, then create its certificate:
asc pass-type-ids create --identifier "pass.com.example" --name "Example Pass"asc certificates create --certificate-type PASS_TYPE_ID --pass-type-id "PASS_TYPE_ID" --csr "./pass.csr"asc pass-type-ids certificates list --pass-type-id "PASS_TYPE_ID" --paginate
- Create a provisioning profile:
asc profiles create --name "AppStore Profile" --profile-type IOS_APP_STORE --bundle "BUNDLE_ID" --certificate "CERT_ID"- Include devices for development/ad-hoc:
asc profiles create --name "Dev Profile" --profile-type IOS_APP_DEVELOPMENT --bundle "BUNDLE_ID" --certificate "CERT_ID" --device "DEVICE_ID"
- Download the profile:
asc profiles download --id "PROFILE_ID" --output "./profiles/AppStore.mobileprovision"
- Inspect and install the downloaded profile locally when needed:
asc profiles inspect --path "./profiles/AppStore.mobileprovision" --output tableasc profiles inspect --path "./profiles/AppStore.mobileprovision" --entitlements --output markdownasc profiles local install --path "./profiles/AppStore.mobileprovision"asc profiles local list --output table- On macOS, the default directory follows the active Xcode: Xcode 16 or newer uses
~/Library/Developer/Xcode/UserData/Provisioning Profiles; Xcode 15 or older uses~/Library/MobileDevice/Provisioning Profiles. Hosts without a full active Xcode fall back to the legacy directory and print a note to stderr. - Pass
--install-dirwhen automation must target a fixed directory.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 169 lines · 46 tokens per session scan B 540d65401b7a
asc-signing-setup is a skill published in the GitHub repository web-casa/DeepSeek-Harness-Desktop (121 stars, last pushed 7d ago), licensed MIT. It adds 46 tokens to every session and 2,103 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). It is 100% identical to asc-signing-setup, differing in 0 lines, and is treated as a copy.
Other skills, from other repositories
swift-expert
Expert-level Swift development for iOS, macOS with SwiftUI, Combine, and modern Swift 5.9+. Use when the user mentions iOS, macOS, SwiftUI, Combine, async await, or Apple platforms, or when the task involves Modern Swift Features, Basics and Optionals, Functions and Closures, or Structs and Classes.
tauri-expert
Expert in Tauri framework, Rust backend, web frontend integration, and lightweight desktop applications. Use when the user mentions desktop, Rust, web, cross platform, or performance, or when the task involves Tauri Architecture, Tauri vs Electron, Core Components, or Security Features.
skill_creator
An interactive workflow for creating, importing, and adapting Tiangong skills, which are instruction packages for an AI agent.
volcengine_video
Instructions for generating videos with Volcengine’s Seedance model from a text description.
internet_search
Instructions for using a local search script to retrieve current web results as JSON, including titles, links, summaries, and sources.
codexplusplus
A desktop companion for Codex that connects through Chromium's developer interface and a local helper service. It can switch providers, convert between two chat API formats, manage sessions, export Markdown, track token usage history, and change parts of the interface.