tipkit — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited tipkit (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 2 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use TipKit for small, contextual feature-discovery moments: inline tips, popover tips, rule-gated education, and lightweight coach marks. Keep generic SwiftUI architecture, navigation, layout, and long first-run onboarding flows in their sibling skills unless TipKit presentation is the core issue.
TipKit's core Tip, TipView, popoverTip, rules, events, options, and testing overrides are available on iOS 17+, iPadOS 17+, macOS 14+, tvOS 17+, watchOS 10+, and visionOS 1+.
Gate newer APIs explicitly:
| API | Availability | Use |
|---|---|---|
TipGroup | iOS 18+ | Defaults to .firstAvailable; use .ordered only for sequences where later tips wait for earlier invalidation. |
.cloudKitContainer(...) | iOS 18+ | Sync tip state, parameters, events, and display counts across devices. |
MaxDisplayDuration | iOS 18+ | Automatically invalidate after cumulative display time. |
resetEligibility() | iOS 26+ | Make a previously invalidated tip eligible again without resetting the datastore. |
Call Tips.configure(_:) once during app initialization, before any tip can display. Do not configure TipKit from a view's onAppear or .task.
import SwiftUI
import TipKit
@main
struct MyApp: App {
init() {
do {
try Tips.configure([
.datastoreLocation(.applicationDefault),
.displayFrequency(.daily)
])
} catch {
assertionFailure("TipKit configuration failed: \(error)")
}
}
var body: some Scene {
WindowGroup { ContentView() }
}
}Use .datastoreLocation(.groupContainer(identifier:)) only when an app and extension or app-group members intentionally share tip state. Keep option settings consistent across app-group members because TipKit persists option state with the tip record.
Use CloudKit sync only on iOS 18+ and later. Enable iCloud + CloudKit and Background Modes > Remote notifications, then pass a container:
try Tips.configure([
.cloudKitContainer(.named("iCloud.com.example.app.tips"))
])Prefer a dedicated container with a .tips suffix. .automatic uses the first entitled .tips container when present, then falls back to the primary container.
Tips are small, transient help. Use them for features people can understand and try in a few simple steps. If the flow needs a long explanation, multiple screens, or critical safety/error information, use a tutorial, alert, inline warning, or onboarding flow instead.
Follow HIG-aligned defaults:
point to a specific control.
Tip conforms to Identifiable and Sendable. Provide title at minimum; add message, image, actions, rules, options, and id only when they improve the feature-discovery moment.
import TipKit
struct FavoriteTip: Tip {
var title: Text { Text("Save to Favorites") }
var message: Text? { Text("Tap the heart to keep items for quick access.") }
var image: Image? { Image(systemName: "heart.fill") }
}By default, TipKit uses the tip type name as id. Override id for reusable tips whose persisted state should vary by content:
struct NewItemTip: Tip {
let itemID: Item.ID
var id: String { "NewItemTip-\(itemID)" }
var title: Text { Text("New Item Available") }
}Use stable, concrete identifiers. Do not derive IDs from transient copy or unstable ordering.
Use TipView for inline tips:
let favoriteTip = FavoriteTip()
VStack {
TipView(favoriteTip, arrowEdge: .bottom)
ItemListView()
}Use .popoverTip when the tip should point to a control:
Button {
toggleFavorite()
favoriteTip.invalidate(reason: .actionPerformed)
} label: {
Image(systemName: "heart")
}
.popoverTip(favoriteTip, arrowEdge: .top)Rules are ANDed together. A tip becomes eligible only when every rule passes.
Use @Parameter for persisted app state:
struct FavoriteTip: Tip {
@Parameter static var hasSeenList = false
var title: Text { Text("Save to Favorites") }
var rules: [Rule] {
#Rule(Self.$hasSeenList) { $0 == true }
}
}Use Tips.Event for repeated user actions. TipKit queries the most recent 1000 donations by default, so keep event rules bounded and intentional.
struct ShortcutTip: Tip {
static let manualSaveEvent = Tips.Event(id: "manualSave")
var title: Text { Text("Save Faster") }
var rules: [Rule] {
#Rule(Self.manualSaveEvent) {
$0.donations.donatedWithin(.week).count >= 3
}
}
}
ShortcutTip.manualSaveEvent.sendDonation()For richer event rules, define Tips.Event<DonationInfo> where DonationInfo: Codable, Sendable. Keep donation payloads small.
Group related event definitions in a shared namespace when several tips use the same events; event IDs are the persistence boundary, so collisions can create confusing eligibility.
Use options sparingly; frequency and invalidation rules are part of the tip's persisted behavior.
struct DailyTip: Tip {
var title: Text { Text("Try Filters") }
var options: [any TipOption] {
MaxDisplayCount(3)
IgnoresDisplayFrequency(false)
}
}MaxDisplayDuration is iOS 18+. It counts cumulative display time and has a minimum continuous display duration before automatic invalidation can occur. Do not use it as a replacement for explicit invalidate(reason:) when the app knows the taught action or ordered step is complete.
Call invalidate(reason:) when the user performs the discovered action or the tip is no longer relevant. Invalidation is permanent until the datastore is reset or, on iOS 26+, the specific tip calls await resetEligibility().
favoriteTip.invalidate(reason: .actionPerformed)Use .tipClosed for explicit dismissal and .displayCountExceeded or .displayDurationExceeded only when describing automatic invalidation outcomes.
Add Action buttons when the user needs a direct route to settings, more information, or a setup flow.
struct FeatureTip: Tip {
var title: Text { Text("Try the New Editor") }
var actions: [Action] {
Action(id: "open-editor", title: "Open Editor")
Action(id: "learn-more", title: "Learn More")
}
}
TipView(FeatureTip()) { action in
switch action.id {
case "open-editor":
openEditor()
case "learn-more":
showHelp()
default:
break
}
}For custom appearance, prefer TipViewStyle.Configuration values over reading directly from a concrete tip instance. That preserves labels, handlers, and modifiers applied to the TipView.
struct CompactTipStyle: TipViewStyle {
func makeBody(configuration: Configuration) -> some View {
HStack(alignment: .top) {
configuration.image?
VStack(alignment: .leading) {
configuration.title?
configuration.message?
ForEach(configuration.actions) { action in
Button(action: action.handler) {
action.label()
}
}
}
}
.padding()
}
}TipGroup is iOS 18+. Store groups in SwiftUI state so the observable group object persists across view updates. In every review of a TipGroup(.ordered) plan, explicitly distinguish the default priority from ordered sequences: TipGroup defaults to .firstAvailable, and TipGroup(.ordered) is required when each later tip must wait for all previous tips to be invalidated.
struct OnboardingView: View {
@State private var tips = TipGroup(.ordered) {
WelcomeTip()
SearchTip()
FilterTip()
}
var body: some View {
VStack {
TipView(tips.currentTip)
ContentView()
}
}
}TipGroup defaults to .firstAvailable, which shows the first eligible tip in the group. Use .ordered only for true sequences, and invalidate each taught step when the user completes it so the next ordered tip can advance. MaxDisplayDuration can cap display time, but it is not the sequencing mechanism for an ordered group. Cast currentTip when the same group spans multiple controls:
Button("Search") { openSearch() }
.popoverTip(tips.currentTip as? SearchTip)Use testing overrides only in debug/test code, and apply them before Tips.configure(_:).
#if DEBUG
if ProcessInfo.processInfo.arguments.contains("--reset-tips") {
try? Tips.resetDatastore()
}
if ProcessInfo.processInfo.arguments.contains("--show-all-tips") {
Tips.showAllTipsForTesting()
}
#endif
try Tips.configure()Built-in launch arguments are also available:
-com.apple.TipKit.ResetDatastore 1-com.apple.TipKit.ShowAllTips 1-com.apple.TipKit.ShowTips TipTypeA,TipTypeB-com.apple.TipKit.HideAllTips 1Testing override precedence is specific show, specific hide, show all, then hide all. Tips.resetDatastore() must run before Tips.configure(_:).
Configure during app initialization. View-level configuration can race with tip display and can also hit datastore-already-configured errors.
Gate TipGroup, CloudKit sync, and MaxDisplayDuration. Provide iOS 17 fallbacks with parameters/events only when the app still supports iOS 17. When the plan mentions TipGroup(.ordered), also call out that plain TipGroup defaults to .firstAvailable. Use this explicit review wording: "Plain TipGroup defaults to .firstAvailable; TipGroup(.ordered) is the iOS 18+ sequence mode where later tips wait for earlier invalidation."
Tips are dismissible and educational. Use alerts, confirmations, inline warnings, or blocking UI for safety, errors, data loss, and required steps.
showAllTipsForTesting() and related overrides bypass rules and frequency limits. Keep them behind #if DEBUG, test scheme arguments, or UI-test-only launch arguments.
Tip IDs own persistence. If a reusable tip's ID changes unexpectedly, users can see duplicate or stale education.
Tips.configure(_:) runs once during app initialization before tips display.Tips.resetDatastore() runs only before configuration and only for tests/debug.id with stable content-derived values.TipGroup is stored in @State; reviews call out the default .firstAvailable priority and use .ordered only for true sequences with explicit invalidation, not MaxDisplayDuration as the sequencing mechanism.configuration values and call action.label().Tips.configure(_:): https://sosumi.ai/documentation/tipkit/tips/configure(_:)TipGroup: https://sosumi.ai/documentation/tipkit/tipgroup~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.