What is ios-code-audit CLAUDE.md?

A Claude Code skill that creates a CODE_AUDIT.md report for Swift projects targeting iOS or macOS. It is a set of audit prompts and report templates, not an application or build system.

Running structured audits of iOS or macOS projects and producing a report with findings organized into stable numbered sections.

It provides a repeatable way to inspect another Swift codebase for issues such as outdated APIs, dead code, duplication, bugs, security problems, and performance concerns.

ios-code-audit CLAUDE.md — Instructions file for coding agents by jazzychad: A Claude Code skill that creates a CODE

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add instructions/jazzychad/ios-code-audit/claude-md

Clone the repo

git clone --depth 1 https://github.com/jazzychad/ios-code-audit

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/jazzychad/ios-code-audit/claude-md.svg)](https://agentmods.dev/instructions/jazzychad/ios-code-audit/claude-md)

Your own site

<a href="https://agentmods.dev/instructions/jazzychad/ios-code-audit/claude-md"><img src="https://agentmods.dev/badge/instructions/jazzychad/ios-code-audit/claude-md.svg" alt="Measured on agentmods" height="20"></a>

Per session 592 This file is loaded in full into every session.

When invoked 592 The same file — it is already loaded in full.

Security scan A 0 findings. Scan, not verified.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5	$0.00592	$0.00592
Opus 5	$0.00296	$0.00296
Sonnet 5	$0.00118	$0.00118
Haiku 4.5	$0.00059	$0.00059

Measured 4d ago against content hash 0bfebde4a19c, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

ios-code-audit CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 29 lines

How it starts

The opening of the file, as written. The whole thing — 29 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CLAUDE.md

This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.

What this repo is

A single Claude Code skill (ios-code-audit) that produces a CODE_AUDIT.md report for an iOS/macOS Swift project. There is no application code, build system, or test suite here — the "deliverables" are the prompts that drive an audit run against some other Swift codebase.

When the user invokes this skill, Claude is operating in the user's iOS project directory, not this one. Edits in this repo only change future audit behavior.

File layout

SKILL.md — the skill definition and the 6-step workflow Claude follows when invoked. This is the source of truth; everything else is referenced from it.
references/agent-prompts.md — copy-paste briefs for the three parallel Explore agents (concurrency/API modernity, dead code/duplication, bugs/security/performance). Contains a placeholder table at the bottom showing how each {PLACEHOLDER} is discovered.
references/report-template.md — the CODE_AUDIT.md skeleton with section numbering. Section numbers (3.1, 3.2, …) are stable across edits by design so user notes referencing "§5.4" don't shift.

The three files form a single pipeline: SKILL.md drives the workflow, the agent prompts produce raw findings, and the report template structures them.

Editing rules specific to this skill

Severity discipline is the load-bearing invariant. SKILL.md enforces a four-level guide (Critical/High/Medium/Low) and requires spot-verification of every Critical claim before it lands in the report. Don't loosen this — it's a direct response to past runs where agents overstated severity.
The three agents must run in parallel. agent-prompts.md repeats this: "send all three in a single message with multiple Agent tool calls." If you edit the workflow, preserve the parallel-launch requirement.
Per-finding template is identical across all three agent briefs. If you change the format (Location/What/Why/Action/Severity), update it in all three briefs and the report template in lockstep — synthesis depends on it being mechanical.
Dead/ (or any explicitly-archived directory) is excluded by default. The skill expects to read the audited project's own CLAUDE.md to discover excluded paths.

Read the full file on GitHub · 29 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

4d ago First seen · 29 lines · 592 tokens per session scan A 0bfebde4a19c

Subscribe to this mod's changes

ios-code-audit CLAUDE.md is an instructions file published in the GitHub repository jazzychad/ios-code-audit (36 stars, last pushed 3mo ago), licensed MIT. It adds 592 tokens to every session, about $0.0030 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Code review Kotlin and Swift Languages

Shark AGENTS.md

Instructions for kaandedeoglu/Shark, covering agents.md, positioning (keep docs/marketing consistent with this), build and development commands, building the project and build in debug mode.

kaandedeoglu/Shark · 2,319 tokens

MarkdownView AGENTS.md

Instructions for keitaoouchi/MarkdownView, covering agents, technical components, relationships (data/event flow overview), extension points (overview) and platform / distribution.

keitaoouchi/MarkdownView · 722 tokens

skills copilot-instructions.md

Instructions for dhruvanbhalara/skills, covering project instructions & best practices, core tech stack, coding standards, architecture & data and ui & ux (design system).

dhruvanbhalara/skills · 787 tokens

compose-android-template CLAUDE.md

Instructions for ashtanko/compose-android-template, a project described as: 📱 A simple GitHub template to quickly set up an Android project using Kotlin and Jetpack Compose, getting you up and running in just seconds. Perfect for starting new apps with modern Android UI.

ashtanko/compose-android-template · 50 tokens

intentflow-ios AGENTS.md

Instructions for emrecanozturk/intentflow-ios, covering agent instructions, read first, architecture rules, commands and token budget.

emrecanozturk/intentflow-ios · 431 tokens

swift-kmp-skill AGENTS.md

Instructions for sorunokoe/swift-kmp-skill, covering agents.md — swift-kmp, what this repository is, repository structure, how to apply this skill and skill loading order.

sorunokoe/swift-kmp-skill · 675 tokens