Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add gaelic-ghost/socket --skill xcode-build-run-workflowgit clone --depth 1 https://github.com/gaelic-ghost/socketWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/gaelic-ghost/socket/xcode-build-run-workflow)<a href="https://agentmods.dev/skills/gaelic-ghost/socket/xcode-build-run-workflow"><img src="https://agentmods.dev/badge/skills/gaelic-ghost/socket/xcode-build-run-workflow/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/gaelic-ghost/socket/xcode-build-run-workflow"><img src="https://agentmods.dev/badge/skills/gaelic-ghost/socket/xcode-build-run-workflow.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00067 | $0.02207 |
| Opus 5.5 | $0.00027 | $0.00883 |
| Sonnet 5.5 | $0.00013 | $0.00441 |
| Haiku 4.5 | $0.00007 | $0.00221 |
Grade A, and why
xcode-build-run-workflow scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 145 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Xcode Build Run Workflow
Purpose
Use this skill as the primary execution workflow for non-testing work in or around Xcode-managed projects and workspaces. Keep it focused on workspace inspection, read/search diagnostics, builds, runs, previews, toolchain management, file membership, Release-versus-Debug validation, and the .pbxproj warning boundary. scripts/run-workflow.fsx is the runtime entrypoint for MCP-first build/run execution, official CLI fallback planning, and direct .pbxproj warning enforcement.
When To Use
- Use this skill for Xcode workspace inspection, project discovery, read/search diagnostics, build, run, preview, and navigator-issue tasks.
- Use this skill for Xcode MCP operations, scheme-aware execution, and official Apple CLI fallback when the work is primarily about build/run rather than tests.
- Use this skill when direct filesystem mutation around an Xcode-managed project may be required.
- Use this skill for file-membership and target-membership verification after on-disk edits.
- Use this skill for Debug/Release build-configuration work, artifacts, archives, toolchain checks, and Metal-toolchain-aware build execution.
- Recommend
xcode-coding-intelligence-workflowwhen the request is primarily about Xcode Intelligence setup, Xcode-hosted agents, external-agent access throughxcrun mcpbridge, command/tool permissions, or Xcode-only agent configuration homes. - Do not use this skill as the default path for Swift Testing, XCTest, XCUITest,
.xctestplan, flaky-test diagnosis, retries, or test filtering. - Recommend
xcode-testing-workflowwhen the task is primarily about tests or test diagnosis. - Recommend
explore-apple-swift-docswhen the user needs Apple or Swift documentation lookup rather than execution work. - Recommend
swift-package-build-run-workfloworswift-package-testing-workflowwhen the task is ordinary SwiftPM package work outside Xcode-managed execution. - Recommend
bootstrap-xcode-workspace --operation alignwhen an existing Apple product workspace needs managed guidance alignment rather than active engineering work.
What ships with it
18 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- agents/openai.yaml 400 B
- references/allowlist-guidance.md 326 B
- references/cli-fallback-matrix.md 1.2 KB
- references/dash-docs-flow.md 335 B
- references/mcp-failure-handoff.md 1.2 KB
- references/mcp-tool-matrix.md 967 B
- references/mutation-risk-policy.md 1.3 KB
- references/mutation-via-mcp.md 374 B
- references/skills-discovery.md 471 B
- references/skills-installation.md 492 B
- references/snippets/apple-swift-core.md 12 KB
- references/snippets/apple-xcode-project-core.md 26 KB
- references/testing-plans-file-membership-and-configurations.md 2.0 KB
- references/toolchain-management.md 2.6 KB
- references/workflow-policy.md 789 B
- references/xcodegen-project-maintenance.md 7.0 KB
- scripts/detect-xcode-managed-scope.fsx 893 B
- scripts/run-workflow.fsx 3.3 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 145 lines · 67 tokens per session scan A 2e5b29cce4d9
xcode-build-run-workflow is a skill published in the GitHub repository gaelic-ghost/socket (7 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 67 tokens to every session and 2,207 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
bug-fix
Use when a bug, regression, or unexpected behaviour is reported and the user wants it fixed end to end — "why is X broken", "this stopped working after Y", "fix this crash". Also use when a symptom is known but its cause is not. Not for building new behaviour, and not for a change whose cause is already proven.
bug-investigate
Use when someone wants to know WHY something is broken and has not asked for it to be fixed — "why is this happening", "what's causing this error", "find out what's wrong", "diagnose this before we decide". Also use before committing to a fix, when the cause is unknown and the decision depends on it. Not for fixing …
app-store-optimization
Improves visibility and conversion in the App Store and Google Play — metadata, keywords, screenshots, ratings, and the listing experience that turns an impression into an install. Use this to audit or optimize an app listing, plan a launch listing, diagnose poor install conversion, or improve store search visibility.
operating-cadence
Designs the rhythm an organization runs on — which reviews happen weekly, monthly and quarterly, what each one decides, who owns the numbers presented, and how a signal at the front line reaches the people who can act on it. Use this to set up a management operating system, fix a meeting calendar that produces no…
flutter-screenshots
Automate App Store & Google Play screenshot generation for Flutter apps. Scans routing and screens, scores high-value marketing screens, generates self-contained mock harness, runs native simulator captures (iPhone 6.9", iPad 13", Android Phone/Tablet), strips alpha channels, and validates exact store resolutions.
flutter-ui
Build Flutter UI from Figma MCP or image input. Scans src for design tokens (colors, sizes, text styles), existing components, and naming conventions before writing a single line of code. Never hard-codes values.