Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add charlesjones-dev/claude-code-plugins-dev --skill swift-concurrency-reviewgit clone --depth 1 https://github.com/charlesjones-dev/claude-code-plugins-devWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/charlesjones-dev/claude-code-plugins-dev/swift-concurrency-review)<a href="https://agentmods.dev/skills/charlesjones-dev/claude-code-plugins-dev/swift-concurrency-review"><img src="https://agentmods.dev/badge/skills/charlesjones-dev/claude-code-plugins-dev/swift-concurrency-review/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/charlesjones-dev/claude-code-plugins-dev/swift-concurrency-review"><img src="https://agentmods.dev/badge/skills/charlesjones-dev/claude-code-plugins-dev/swift-concurrency-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00094 | $0.01947 |
| Opus 5.5 | $0.00038 | $0.00779 |
| Sonnet 5.5 | $0.00019 | $0.00389 |
| Haiku 4.5 | $0.00009 | $0.00195 |
Grade A, and why
swift-concurrency-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 91 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Swift 6 + SwiftUI Concurrency Review
You review Swift source for Swift 6 strict-concurrency correctness and SwiftUI idiom on modern iOS / macOS. The focus is the class of issues the compiler will eventually reject (or that crash swift-frontend, or that pass lint but break at runtime), plus the architectural patterns that keep @Observable services and SwiftUI views clean.
Scope discipline: this is not a general bug hunt or a style cleanup. Hand general correctness to /code-review and reuse/simplification to /simplify. Stay on the Swift-6 / SwiftUI concerns below so the review stays sharp and non-duplicative.
What to review
Default to the changed Swift files (git diff --name-only + staged + untracked *.swift). If $ARGUMENTS names a path or files, review those. If a KB exists at docs/kb/conventions/swift-6-patterns.md (or similar), read it first - the project may have its own codified rules that supersede the generic ones here.
Review dimensions
For each, report file:line, the issue, the concrete fix, and a one-line why. Cite the compiler diagnostic text where it helps the user recognize it.
1. Sendability across isolation boundaries
- A type sent across an actor boundary (an endpoint
body, a value captured into a detachedTask, anything anactormethod returns) must beSendable. Endpoint bodies that cross the boundary need(any Encodable & Sendable)?, not bareany Encodable. - Domain models that drop
Sendable(e.g. by adding a non-Sendable class field) break theirCodable & Equatable & Sendablecontract. Flag a new stored property that is a non-Sendable reference type. CFStringand most CoreFoundation types are notSendable. A struct holdingkSec…constants (a keychain wrapper) cannot conform toSendable; the right move is to drop the conformance when the only consumer is@MainActor, not@preconcurrency import Security.
2. Actor isolation mismatches
@MainActorwitness vs nonisolated protocol requirement. A@MainActortype (including anystatic func/static leton aSwiftUI.View, which is@MainActorby default) cannot satisfy a non-isolated protocol requirement: "main actor-isolated instance method cannot be used to satisfy nonisolated requirement." Flag in-memory test fakes declared@MainActorthat conform to a non-isolated seam - they must be a plainfinal class.- Static helper on a
Viewtype read from a nonisolated context (e.g. a plainXCTestCase) warns under Swift 6. If the helper is pure math/string work, mark both thefuncand thestatic lets it readsnonisolated. nonisolated init()for default-param evaluation. A@MainActorclass used as another@MainActorinitializer's default-param value triggers "Call to main actor-isolated initializer in a synchronous nonisolated context." Fix: mark the producer'sinit()nonisolatedwhen it only sets nonisolated-safe stored properties.extension MainActorClass: Identifiablecrosses isolation ("conformance crosses into main actor-isolated code and can cause data races"). Use a plainSendablestruct as thesheet(item:)payload instead.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 91 lines · 94 tokens per session scan A 6d9d89363d16
swift-concurrency-review is a skill published in the GitHub repository charlesjones-dev/claude-code-plugins-dev (35 stars, last pushed 13d ago), licensed MIT. It adds 94 tokens to every session and 1,947 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-06.
Other skills, from other repositories
axiom-audit-codable
Use when the user mentions Codable review, JSON encoding/decoding issues, data serialization audit, or modernizing legacy code.
axiom-swift-simplifier
Use when the user wants to simplify Swift code, reduce boilerplate, or make Swift more readable and idiomatic without changing behavior.
release-kotlin-library
Use when preparing, publishing, or checking readiness for a Kotlin library release, including verifying its gradle-maven-publish-plugin prerequisite, reconciling changelogs and API snapshots, and checking publication.
kotlin-concurrency-and-flow
Use when writing or reviewing Kotlin coroutine scope ownership, raw Thread or Executor work, init launches, non-suspending launch APIs, runBlocking, cancellation, StateFlow, SharedFlow, Channel, stateIn, SharingStarted, state updates, or one-shot events.
kotlin-api-design
Use when designing or reviewing Kotlin function ownership, member or extension functions, factories, single-field domain types, value classes, data classes, Kotlin Multiplatform expect/actual declarations, or platform service boundaries.
dart-package-maintenance
Guidelines for maintaining external Dart packages, covering versioning, publishing workflows, and pull request management. Use when updating Dart packages, preparing for a release, or managing collaborative changes in a repository.