Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
/plugin marketplace add johnrogers/claude-swift-engineeringnpx agentmods add plugins/johnrogers/claude-swift-engineering/swift-engineeringgit clone --depth 1 https://github.com/johnrogers/claude-swift-engineeringGrade A, and why
swift-engineering scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "swift-engineering",
"version": "0.1.31",
"description": "Modern Swift/SwiftUI development toolkit with TCA support. Provides agents for planning, implementing, testing, documenting, and building Swift features.",
"keywords": [
"swift",
"swiftui",
"ios",
"macos",
"tca",
"composable-architecture",
"mobile",
"apple"
]
}
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 16 lines scan A ff6033994946
swift-engineering is a plugin published in the GitHub repository johnrogers/claude-swift-engineering (228 stars, last pushed 7mo ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other plugins, from other repositories
android-skills
Android and KMP development skills for Claude Code — architecture, Compose, coroutines, flows, networking (Retrofit, Ktor), persistent storage (Room, DataStore), pagination, dependency injection (Hilt, Koin), testing, debugging, Gradle, and Material Design 3.
compose-agent
Agent skill that helps AI coding assistants write modern Jetpack Compose: correct state, effects, performance-aware modifiers, Navigation 3, Paging 3 in Compose, coroutines on lifecycle, animations, UI tests, focus/keyboard navigation, Compose Multiplatform boundaries, Android launch resources, and idiomatic Kotlin.…
build-swift-apps
Build, debug, profile, test, refactor, and release Swift apps across iOS, macOS, Xcode, SwiftUI, SwiftPM, Tuist, and App Store Connect.
swift-ios-skills marketplace
Plugin marketplace listing 11 plugins: swiftui-skills, swift-core-skills, ios-app-framework-skills, ios-data-framework-skills, ios-ai-ml-skills.
swift-engineer
Elite iOS and macOS development expertise with automatic skill activation for Swift, UIKit, AppKit, SwiftUI, Xcode, and Apple frameworks plus code formatting tools.
apple-dev-skills marketplace
Apple platform development skills, agents, commands, and MCP servers (App Store Connect + Apple developer docs). Covers Swift 6, SwiftUI, design, accessibility, concurrency, Apple review auditing, CI build checks, ASC API automation, and live Apple documentation lookup.