Borrowing it
Nothing to install: this file belongs to duckduckgo/apple-browsers. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/duckduckgo/apple-browsers/main/.claude/skills/ddg-xcode-add-file/SKILL.mdgit clone --depth 1 https://github.com/duckduckgo/apple-browsersWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/duckduckgo/apple-browsers/ddg-xcode-add-file)<a href="https://agentmods.dev/skills/duckduckgo/apple-browsers/ddg-xcode-add-file"><img src="https://agentmods.dev/badge/skills/duckduckgo/apple-browsers/ddg-xcode-add-file/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/duckduckgo/apple-browsers/ddg-xcode-add-file"><img src="https://agentmods.dev/badge/skills/duckduckgo/apple-browsers/ddg-xcode-add-file.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00039 | $0.00714 |
| Opus 5.5 | $0.00016 | $0.00286 |
| Sonnet 5.5 | $0.00008 | $0.00143 |
| Haiku 4.5 | $0.00004 | $0.00071 |
Grade A, and why
ddg-xcode-add-file scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Add, move or delete a file in the Xcode projects
Files inside a Swift package (SharedPackages/, iOS/LocalPackages/, macOS/LocalPackages/) need
no project change: SwiftPM reads them from disk. For everything else, what to do depends on how the
destination folder is represented in iOS/DuckDuckGo-iOS.xcodeproj/project.pbxproj or
macOS/DuckDuckGo-macOS.xcodeproj/project.pbxproj.
-
Classify the destination. For each ancestor folder, nearest first, run
grep "path = <FolderName>;" <project.pbxproj> | grep PBXFileSystemSynchronizedRootGroup. A match is a buildable folder; no match all the way up is a group. If a folder name is ambiguous, confirm the match's ID is listed in the parent group'schildren. On iOS,iOS/DuckDuckGo/itself andiOS/DuckDuckGoTests/are still groups. The macOS project is mid-migration: most of its folders are still groups. -
Buildable folder: create, move or delete the file on disk and stop. A pbxproj entry on top of that compiles the file twice. If the file needs a different target than its folder gives it, mirror an existing
PBXFileSystemSynchronizedBuildFileExceptionSet, or ask the user to set it in Xcode's File Inspector. -
Group: pick a sibling file with the same target membership and copy its entries with fresh IDs (
python3 -c "import secrets; print(secrets.token_hex(12).upper())", thengrepthat each ID is unused):- one
PBXFileReference - one
PBXBuildFileper target - one child line in the parent
PBXGroup - one line in each target's
PBXSourcesBuildPhase
On macOS that is normally two targets:
DuckDuckGo Privacy BrowserandDuckDuckGo Privacy Browser App Store, orUnit TestsandUnit Tests App Store. A file in only one of them builds locally and fails in CI. Moving or deleting a file removes the same entries. - one
-
Edit surgically. Insert or delete lines anchored on the sibling's exact lines. Never re-serialize the file, for example with the
xcodeprojgem: it rewrites package references and produces an unreviewable diff. -
New directory under a group: ask the user to create it in Xcode as a folder (File ▸ New ▸ Folder) so it becomes a buildable folder, on iOS and macOS alike. Converting existing groups belongs in dedicated migration PRs that use Xcode's Convert to Folder.
Done when plutil -lint passes on the project file, its git diff holds only the lines for your
files, and each file is in every target its siblings are in.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago Changed c6a7d46588b3
- 1mo ago First seen · 44 lines · 39 tokens per session scan A 41bc3d955ebd
ddg-xcode-add-file is a skill published in the GitHub repository duckduckgo/apple-browsers (270 stars, last pushed today), licensed Apache-2.0. It adds 39 tokens to every session and 714 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-03.
ddg-xcode-add-file compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| ddg-xcode-add-fileduckduckgo/apple-browsers | Skill | 270 | today | Apache-2.0 | A | 39 | Claude Code |
| cli-anything-nsloggerHKUDS/CLI-Anything | Skill | 58k | 1mo ago | Apache-2.0 | A | 36 | Claude Code, Codex |
| benchmarksoniqo/speech-swift | Skill | 1.3k | yesterday | Apache-2.0 | A | 0 | Claude Code |
| review-prsoniqo/speech-swift | Skill | 1.3k | yesterday | Apache-2.0 | A | 71 | Claude Code |
| boutique-best-practicesmergesort/Boutique | Skill | 1.1k | 5d ago | MIT | A | 56 | Claude Code |
| boutique-storemergesort/Boutique | Skill | 1.1k | 5d ago | MIT | A | 52 | Claude Code |
| boutique-stored-valuesmergesort/Boutique | Skill | 1.1k | 5d ago | MIT | A | 68 | Claude Code |