cometchat-ios-components — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited cometchat-ios-components (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
cometchat-ios-core owns install, credentials, init → login → render and the golden-path chat surface. This skill ADDS the per-component catalogue; it never restates core's setup. Fetch exact API via cometchat-ios-core/references/docs-map.md.Choosing a component, or customising one: "what shows the member list?", "put a badge on the conversation row", "swap the message bubble".
| Component | For |
|---|---|
CometChatConversations | Recent-chats list · the usual entry point |
CometChatMessageHeader · CometChatMessageList · CometChatCompactMessageComposer | The chat screen — you compose these three yourself |
CometChatUsers · CometChatGroups · CometChatGroupMembers | Pickers and rosters |
CometChatSearch | Global search over conversations and messages |
CometChatThreadedMessageHeader | Thread parent header |
CometChatCallButtons · CometChatIncomingCall · CometChatOngoingCall · CometChatCallLogs | Calling → cometchat-ios-calls |
CometChatAvatar · CometChatBadge · CometChatStatusIndicator · CometChatDate · CometChatReceipt | Base building blocks |
CometChatMessageInformation · CometChatAIAssistanceChatHistory | Per-message detail · AI history |
CometChatScopeChange | Change a member's role. set(group:groupMember:), options: [(String, CometChat.MemberScope)] (property). PRESENT it as a sheet — its Cancel calls dismiss(), so pushing it strands the user. CometChatGroupMembers already presents it on row tap. |
There is NO composite component.CometChatMessages,CometChat{Users,Groups,Conversations}WithMessages,CometChatAddMembers,CometChatMessageHeaderOptionare v4 or non-existent — never emit them. If a symbol is not incatalogs/ios-v5.json, it does not exist in v5, whatever a page says.
Self and are chainable: set(user:), set(onItemClick:), set(subtitle:).list.avatarStyle = …, conversations.onSearchClick = { … }, groups.onSelectedItemProceed = { … }.setXxx(xxx:) with the label repeated: CometChatMessageInformation uses setSubtitle(subtitle:), setBubbleView(bubbleView:), setListItemView(listItemView:), setOnError(onError:). Writing them in shape-1 form (set(subtitle:)) does not compile on that component.Which is which is per component, and the kit is not consistent — CometChatConversations has set(subtitleView:)/set(trailView:) while CometChatUsers and CometChatGroups have set(subtitle:)/set(trailingView:), and CometChatGroupMembers uses the Conversations spelling. Never generalise a name across components — fetch the component's `.md` twin.
Every list component exposes: set(listItemView:) (whole row) · set(leadingView:) · set(titleView:) · subtitle · trailing · set(options:) (swipe/overflow actions). Use these instead of building your own row above the list. Empty/error/loading are assignable views inherited from CometChatListBase: emptyStateView, errorStateView, loadingView, plus emptyStateTitleText / emptyStateSubTitleText to retitle the built-in one. CometChatSearch is the exception — it does NOT inherit CometChatListBase, so it has none of that chrome; it uses set(emptyView:) / set(errorView:) / set(loadingView:) instead.
set(user:). Measured on 5.1.19: an avatar given a UIImage through either set(image:) or init(image:) draws an empty circle — the image never appears, with no warning and no error, because the kit paints its own content over it. setAvatar(avatarUrl:with:) is the working path, and its with: name renders initials when no URL loads. There is also no no-arg init: CometChatAvatar() does not compile — construct with CometChatAvatar(image: nil) or CometChatAvatar(frame:) and then call setAvatar.set(listItemViewForMessage:) plus …ForImage/Video/Audio/Document/Link/Conversation. There are no *ForMessage granular (title/subtitle/leading/trailing) slots — those exist for conversations only, as properties.The component renders at full size, its custom slot appears in the right place (inside the row, not above the list), and every rendered control does something when tapped.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.