Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/gaelic-ghost/socket/xcode-testing-workflownpx skills add gaelic-ghost/socket --skill xcode-testing-workflowgit clone --depth 1 https://github.com/gaelic-ghost/socketWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/gaelic-ghost/socket/xcode-testing-workflow)<a href="https://agentmods.dev/skills/gaelic-ghost/socket/xcode-testing-workflow"><img src="https://agentmods.dev/badge/skills/gaelic-ghost/socket/xcode-testing-workflow.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00081 | $0.02560 |
| Opus 5 | $0.00041 | $0.01280 |
| Sonnet 5 | $0.00016 | $0.00512 |
| Haiku 4.5 | $0.00008 | $0.00256 |
Grade A, and why
xcode-testing-workflow scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 155 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Xcode Testing Workflow
Purpose
Use this skill as the primary execution workflow for test-focused work in or around Xcode-managed projects and workspaces. Keep it focused on Swift Testing, XCTest, XCUITest, XCUIAutomation-oriented mechanics, code coverage, .xctestplan, destinations, launch arguments, interruption handling, attachments, accessibility-verification follow-through, Instruments profiling, xctrace trace capture, filters, retries, diagnostics, and test-specific Debug/Release validation instead of broad build/run or toolchain work. scripts/run-workflow.fsx is the runtime entrypoint for MCP-first test execution, official CLI fallback planning, and the remaining .pbxproj warning boundary when mutation enters project-file territory.
When To Use
- Use this skill for Xcode test execution, test diagnosis, test filtering, retries, destination selection, and test-plan work.
- Use this skill for Swift Testing, XCTest, XCUITest, XCUIAutomation-oriented mechanics,
.xctestplan, flaky-test diagnosis, accessibility-verification follow-through, and test-only configuration validation. - Use this skill for Instruments and
xctracefollow-through when performance-sensitive tests need Time Profiler, Metal System Trace, Allocations, VM Tracker, Points of Interest, signpost-aligned traces, or.traceartifact interpretation. - Use this skill for Xcode MCP operations and official Apple CLI fallback when the work is primarily about tests rather than build/run.
- Use this skill when direct filesystem mutation around tests or test plans may be required.
- Recommend
xcode-coding-intelligence-workflowwhen the request is primarily about Xcode Intelligence setup, Xcode-hosted agents, external-agent access throughxcrun mcpbridge, command/tool permissions, or Xcode-only agent configuration homes. - Do not use this skill as the default path for ordinary build, run, preview, archive, or general project-integrity work.
- Recommend
xcode-build-run-workflowwhen the task is primarily about build, run, previews, file membership, archives, toolchains, or guarded non-test mutation work. - Recommend
explore-apple-swift-docswhen the user needs Apple or Swift documentation lookup rather than execution work. - Recommend
swift-package-testing-workflowwhen the task is package-first testing outside Xcode-managed execution. - Recommend
bootstrap-xcode-workspace --operation alignwhen an existing Apple product workspace needs managed guidance alignment rather than active engineering work.
What ships with it
25 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- agents/openai.yaml 371 B
- references/allowlist-guidance.md 326 B
- references/cli-fallback-matrix.md 2.2 KB
- references/code-coverage.md 2.5 KB
- references/dash-docs-flow.md 333 B
- references/instruments-performance-profiling.md 6.6 KB
- references/ios-ui-automation-destinations.md 3.4 KB
- references/macos-ui-test-permission-ownership.md 3.7 KB
- references/mcp-failure-handoff.md 1.2 KB
- references/mcp-tool-matrix.md 1.7 KB
- references/mutation-risk-policy.md 1.3 KB
- references/mutation-via-mcp.md 375 B
- references/skills-discovery.md 471 B
- references/skills-installation.md 492 B
- references/snippets/apple-swift-core.md 12 KB
- references/snippets/apple-xcode-project-core.md 26 KB
- references/testing-plans-file-membership-and-configurations.md 4.3 KB
- references/toolchain-management.md 2.6 KB
- references/ui-accessibility-verification.md 1.5 KB
- references/workflow-policy.md 789 B
- references/xcodegen-project-maintenance.md 5.8 KB
- references/xctestplan-configurations-and-matrix.md 1.4 KB
- references/xcuitest-and-xcuiautomation.md 2.0 KB
- scripts/detect-xcode-managed-scope.fsx 108 B
- scripts/run-workflow.fsx 3.3 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 155 lines · 81 tokens per session scan A f2a28ee2745d
xcode-testing-workflow is a skill published in the GitHub repository gaelic-ghost/socket (7 stars, last pushed 9d ago), licensed Apache-2.0. It adds 81 tokens to every session and 2,560 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
test-native-extension
Validate a third-party control repo across four automated layers plus one printed manual recipe. Layer 1 asserts native-source structure (Android getName() and iOS +moduleName to manifest nativeModule; @ReactMethod / RCTEXPORTMETHOD to methods; no @ReactModule) plus load/init readiness (ReactPackage public no-arg…
qa
Browser-based QA verification. Launches a real browser, navigates the app, clicks buttons, fills forms, and tests user flows. Works as a standalone skill or as a phase end condition in campaigns. Requires Playwright (optional dependency, graceful skip if not installed).
live-preview
Mid-build visual verification loop. Takes screenshots of components during construction, not just after. Catches visual regressions and invisible features before they compound. Requires Playwright or similar screenshot tool.
app-store-optimization
Improves visibility and conversion in the App Store and Google Play — metadata, keywords, screenshots, ratings, and the listing experience that turns an impression into an install. Use this to audit or optimize an app listing, plan a launch listing, diagnose poor install conversion, or improve store search visibility.
flutter-ui
Build Flutter UI from Figma MCP or image input. Scans src for design tokens (colors, sizes, text styles), existing components, and naming conventions before writing a single line of code. Never hard-codes values.
webapp-testing
Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.