axiom-audit-iap

Analyze Swift iOS codebases for StoreKit implementation flaws and compliance issues.

34|2|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/DengNaichen/Stet --skill axiom-audit-iap
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: axiom-audit-iap
Source: https://github.com/DengNaichen/Stet/tree/main/.agents/skills/axiom-audit-iap
Command: npx skills add https://github.com/DengNaichen/Stet --skill axiom-audit-iap

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill identifies critical revenue-leaking bugs, security vulnerabilities, and App Store compliance issues within your StoreKit implementation.

Core Features & Use Cases

  • Architecture Mapping: Automatically maps your StoreKit version, purchase flows, and transaction handling logic.
  • Anti-Pattern Detection: Scans for missing transaction verification, unhandled subscription states, and missing restore paths.
  • Compliance Auditing: Flags missing subscription terms or loot box odds disclosures that lead to App Store rejections.

Quick Start

Run the axiom-audit-iap skill to perform a full audit of the current repository and generate an IAP health report.

Frequently Asked Questions about axiom-audit-iap

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my iOS app's StoreKit implementation for revenue leaks?

To audit StoreKit implementation for revenue leaks, you need to systematically scan Swift files to detect missing transaction verification, unhandled subscription states, and improper transaction finishing. This process maps purchase flows and evaluates transaction lifecycle management.

What App Store compliance issues should I look for during an IAP audit?

During an IAP audit, you should look for App Store compliance issues like missing subscription terms or loot box odds disclosures. Detecting these anti-patterns early prevents App Store rejections and ensures robust restore functionality.

How do I detect missing transaction verification in my Swift codebase?

To detect missing transaction verification in a Swift codebase, scan the project to verify secure transaction handling and check for unhandled subscription states. Systematic scanning identifies StoreKit implementation flaws and revenue-impacting anti-patterns.

Can I audit an entire iOS project to check subscription state handling?

Yes, you can audit an entire iOS project to check subscription state handling by evaluating the transaction lifecycle management across the codebase. This verifies secure verification and ensures proper transaction finishing.

Why does my StoreKit implementation have unhandled subscription states?

StoreKit implementation has unhandled subscription states due to architecture flaws in transaction lifecycle management. Systematic scanning of Swift files detects these revenue-impacting anti-patterns and verifies proper transaction finishing.

What is the best way to ensure App Store Guideline compliance for in-app purchases?

The best way to ensure App Store Guideline compliance for in-app purchases is to perform a full audit that flags missing subscription terms and loot box odds disclosures. Evaluating transaction lifecycle management and restore functionality prevents rejections.