apple-credentials SKILL.md skillA
apple-credentials from yybd/app-factory is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add yybd/app-factory/apple-credentials@git:20260929.a7fd8b7Pins git:20260929.a7fd8b7 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- yybd/app-factory
- Path
plugins/apple-track/skills/apple-credentials/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260929.a7fd8b7, committed Sep 29, 2026
- Size
- 7,456 bytes
- Repository stars
- 5
- License
- MIT
The single owner of Apple developer credentials and certificates — checking what you have, explaining the types and why each is needed, creating the ones that can be created, and setting up auth credentials. Use this whenever the user needs a signing certificate ("תעודת חתימה", "אישורים של אפל") (Apple Development / Apple Distribution / Developer ID / installer), asks which certificate they need or why, has no certificates and needs to create one, wants to export a certificate as .p12…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Apple Credentials & Certificates > **Conversational language:** talk to the user — questions, summaries, reports — in **the language the user writes in** — unless a `conversational language` is set in the hub `DATA.md` (`$APP_HUB/DATA.md`), which overrides it. This sets the *conversation* language only — content/deliverables follow the app's target locales. This is the home for everything "identity material" in Apple development: the **certificates** that sign your apps, and the **credentials** that authenticate command-line tools to Apple. The goal is that the user understands *which* one they need and *why*, has the right ones present, and can create what's missing. Teach as you go — explain why a given certificate/credential is required, not just the command. Other skills defer here, so be the authoritative, clear source. ## Prerequisites - **Tools:** Xcode command line tools (`xcrun notarytool`, `codesign`) and macOS `security` for `scripts/apple_creds.py`; `fastlane match` (`gem install fastlane`) only as one of the ways certificates get minted. - **Credentials:** an Apple Developer account — this skill is where the notarytool …
Read the whole file at its exact version.
How to install
mdr add yybd/app-factory/apple-credentials@sha256:2aca998a0139d5feThe line at the top of this page pins the label git:20260929.a7fd8b7, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_clj2knkjaabguouu)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Sep 29, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (7456 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
yybd/app-factory · 5 stars · license MIT · pushed 2026-10-28 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_clj2knkjaabguouu GET https://markdownregistry.com/api/v1/resolve?ref=yybd/app-factory/apple-credentials GET https://markdownregistry.com/api/v1/blob/2aca998a0139d5fed1b7a6804dd79036c0fbcb117acc5e3768c1ae15fa1160c1
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.