I've been messing with shortcut files for a while and got annoyed that importing
one always meant finding a Mac or using a signing service. So I made ShortSign.
It runs on the phone. Pick an unsigned .shortcut/plist, or an already-signed one
and it'll pull the workflow out and sign it again. There's batch signing, a URL
box, and it shows up in Files' "Open with" so you can send a file straight to it.
After signing, the share sheet opens by itself. That's the part I use most.
No jailbreak, it's just a normal app you sideload.
The catch is it's not Apple signing. Shortcuts only imports the result if you
install the app's root cert and turn on full trust in Settings. That's fine for
my own phone, but it's not a public signing service. If you want to share a
shortcut with other people, import it first and then copy an iCloud link from
Shortcuts. Apple re-signs that copy, so it works normally for them.
The IPA is unsigned, so you'll need SideStore/AltStore/whatever. iOS 17+.
Source and IPA: https://github.com/dan1165/shortsign
There's a demo GIF on the page. I also had to fix a bug in libshortcutsign where
the AEA checksums weren't written, which is why my first builds kept failing
with "Failed to extract shortcut data" when importing. That took a minute.
Only tested it on my own phone, so if something breaks on your iOS version let
me know. And don't install the cert on a device you don't own. The signing key is
in the repo.