bootstrap-ios — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited bootstrap-ios (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this as the single entry point before touching an Apple-platform app. It is a router skill: discover the project, load only the references needed for the current job, verify that build/test tools exist, then act.
The default posture is conservative:
SwiftData, and current Xcode APIs.
unfiltered xcodebuild output when possible.
project/workspace, Tuist, XcodeGen, CocoaPods, or buildable folders.
references/install-and-bootstrap.md.
read references/xcodebuildmcp.md.
| User asks for... | Load |
|---|---|
| "Bootstrap iOS", "install my iOS skills", "one command" | install-and-bootstrap.md |
| Build, test, simulator, logs, debug, device install | xcodebuildmcp.md |
| SwiftUI screen, navigation, sheets, app wiring | skill-map.md SwiftUI entries |
| Async/await, actors, Sendable, Swift 6 migration | skill-map.md concurrency entries |
| Unit tests, Swift Testing, XCTest migration | skill-map.md testing entries |
| SwiftData, models, queries, migrations, CloudKit | skill-map.md SwiftData entries |
| Core Data stack, fetches, background contexts | skill-map.md Core Data entries |
| Slow builds, compiler time, project settings | SwiftLee Xcode Build Optimization in skill-map.md |
| Architecture/rules loader/advanced Swift discipline | Merowing rules in skill-map.md |
| App Intents, Siri, Shortcuts, widgets | Official Build iOS Apps plugin notes in skill-map.md |
| QA this iOS app | Also use running-bug-review-board and its iOS simulator playbook |
Do not silently modify the user's machine. If the user asks to install or bootstrap, explain what will be installed, then use the helper script in dry-run first:
bash scripts/bootstrap-ios-skills.sh --dry-run --agent cursorAfter the user confirms, run without --dry-run. The helper is idempotent and keeps optional/non-GitHub sources as instructions instead of pretending it can install them.
Before reporting an Apple-platform task done:
report the blocker with the exact next command to fix it.
the next agent to verify.
This skill synthesizes Paul Solt's X article "Install These Skills Before Codex Touches Your Xcode Project", the linked community skill repos, official OpenAI plugin references, Merowing rules, AppCreator notes, and getsentry/XcodeBuildMCP. See references/sources.md.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.