tuist-migration-planner — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited tuist-migration-planner (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill to move an existing Xcode project to Tuist without losing build, test, signing, or runtime behavior.
dependencies.
Capture a known-good command before writing manifests:
xcodebuild build \
-project App.xcodeproj \
-scheme App \
-configuration Debug \
-destination "platform=iOS Simulator,name=<available iPhone simulator>,OS=latest" \
-derivedDataPath DerivedDataBaselineRecord the scheme, configuration, deployment targets, bundle identifiers, Info.plist paths, entitlements, build scripts, and package graph.
Tuist.swift: keep generation options explicit.Project.swift: model targets, sources, resources, scripts, settings, anddependencies.
Tuist/Package.swift: declare external Swift packages and product mappings..xcconfig: move large or shared build settings out of manifests when useful.Keep the first generated graph close to the original project. Defer cleanup until the generated workspace builds and launches.
tuist install
tuist generate --no-open
xcodebuild build \
-workspace App.xcworkspace \
-scheme App \
-configuration Debug \
-destination "platform=iOS Simulator,name=<available iPhone simulator>,OS=latest" \
-derivedDataPath DerivedDataTuistxcrun simctl boot "<available simulator name or UDID>" 2>/dev/null || true
xcrun simctl install booted DerivedDataTuist/Build/Products/Debug-iphonesimulator/App.app
xcrun simctl launch --console-pty booted com.example.appBuild success is not enough; launch catches missing resources, entitlements, bundle identifiers, embedded frameworks, and ObjC category issues.
into resources.
Bundle.module assets.settings for app and extension targets.
Return the migration status, files changed, unresolved parity gaps, and the exact baseline and generated validation commands with results.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.