kmp-architecture — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited kmp-architecture (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill for KMP project structure, module design, source-set hierarchy, shared code boundaries, native UI versus shared UI decisions, library selection, API exposure to Swift, domain/data/presentation layering, and feature modularization.
Start from target platforms and product intent, not from a favorite template:
For new KMP apps, prefer:
project/
shared/ # KMP library with common logic and shared UI if all client platforms use it
androidApp/ # thin Android application shell
iosApp/ # Xcode app consuming the shared framework/package
desktopApp/ # desktop entry point when present
webApp/ # web entry point when presentWhen some platforms use native UI:
sharedLogic/ # consumed by all clients, no Compose dependency
sharedUI/ # consumed only by Compose Multiplatform clients
androidApp/
iosApp/When server is included, isolate client/server ownership:
core/ # models and validation shared between client and server
sharedLogic/
app/androidApp/
app/iosApp/
server/Existing projects do not need to be rewritten just to match this shape. Migrate only when it removes real ambiguity, enables AGP compatibility, or reduces platform coupling.
commonMain owns platform-independent domain logic, presentation state, DTOs when stable, validation, and interfaces.expect/actual for small platform abstractions with stable signatures.Do not add a cross-platform library by habit. Choose after target support is verified:
Before recommending broad KMP adoption in an existing codebase, classify risk:
Prefer incremental adoption where one layer or feature can prove build, test, and release paths before a broad migration.
Use the repo's existing convention. If starting fresh:
feature-x/
domain/
data/
presentation/
ui/Keep use cases for policy-heavy, reused, or independently testable logic. Do not wrap every repository call in a class just to satisfy a diagram.
commonMain supports all configured targets.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.