What is swift-security-expert?

Reference guidance for securing iOS and macOS applications with Apple's Keychain, biometric authentication, cryptography, Secure Enclave, and certificate-trust APIs. It focuses on storing credentials and handling client-side security correctly.

Use it to review or implement Keychain access, Face ID or Touch ID, CryptoKit encryption, secure credentials, certificate pinning, and related security checks.

It helps prevent mistakes when protecting passwords, tokens, keys, certificates, and biometric-gated actions on Apple platforms.

swift-security-expert — Skill for Claude Code by ivan-magda

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add ivan-magda/swift-security-skill --skill swift-security-expert

Clone the repo

git clone --depth 1 https://github.com/ivan-magda/swift-security-skill

Made for: Claude Code.

Or install swift-security-expert, the plugin that ships this one along with the rest of its 1 skill.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/ivan-magda/swift-security-skill/swift-security-expert/github.svg)](https://agentmods.dev/skills/ivan-magda/swift-security-skill/swift-security-expert)

Your own site

<a href="https://agentmods.dev/skills/ivan-magda/swift-security-skill/swift-security-expert"><img src="https://agentmods.dev/badge/skills/ivan-magda/swift-security-skill/swift-security-expert/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/ivan-magda/swift-security-skill/swift-security-expert"><img src="https://agentmods.dev/badge/skills/ivan-magda/swift-security-skill/swift-security-expert.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 122 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 10,310 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

Socket warn 15 Sept 2026
Snyk pass 15 Sept 2026

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00122	$0.10310
Opus 5.5	$0.00049	$0.04124
Sonnet 5.5	$0.00024	$0.02062
Haiku 4.5	$0.00012	$0.01031

Measured 2mo ago against content hash a915770a1a86, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

swift-security-expert scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

swift-security-expert/SKILL.md · 471 lines

How it starts

The opening of the file, as written. The whole thing — 471 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Keychain & Security Expert Skill

Philosophy: Non-opinionated, correctness-focused. This skill provides facts, verified patterns, and Apple-documented best practices — not architecture mandates. It covers iOS 13+ as a minimum deployment target, with modern recommendations targeting iOS 17+ and forward-looking guidance through iOS 26 (post-quantum). Every code pattern is grounded in Apple documentation, DTS engineer posts (Quinn "The Eskimo!"), WWDC sessions, and OWASP MASTG — never from memory alone.

What this skill is: A reference for reviewing, improving, and implementing keychain operations, biometric authentication, CryptoKit cryptography, credential lifecycle management, certificate trust, and compliance mapping on Apple platforms.

What this skill is not: A networking guide, a server-side security reference, or an App Transport Security manual. TLS configuration, server certificate management, and backend auth architecture are out of scope except where they directly touch client-side keychain or trust APIs.

Decision Tree

Determine the user's intent, then follow the matching branch. If ambiguous, ask.

                        ┌─────────────────────┐
                        │  What is the task?   │
                        └─────────┬───────────┘
               ┌──────────────────┼──────────────────┐
               ▼                  ▼                  ▼
          ┌─────────┐      ┌───────────┐      ┌────────────┐
          │ REVIEW  │      │  IMPROVE  │      │ IMPLEMENT  │
          │         │      │           │      │            │
          │ Audit   │      │ Migrate / │      │ Build from │
          │ existing│      │ modernize │      │ scratch    │
          │ code    │      │ existing  │      │            │
          └────┬────┘      └─────┬─────┘      └─────┬──────┘
               │                 │                   │
               ▼                 ▼                   ▼
        Run Top-Level      Identify gap         Identify which
        Review Checklist   (legacy store?        domain(s) apply,
        (§ below) against  wrong API?            load reference
        the code.          missing auth?)        file(s), follow
        Flag each item     Load migration +      ✅ patterns.
        as ✅ / ❌ /       domain-specific        Implement with
        ⚠️ N/A.           reference files.       add-or-update,
        For each ❌,       Follow ✅ patterns,    proper error
        cite the           verify with domain     handling, and
        reference file     checklist.             correct access
        and specific                              control from
        section.                                  the start.

Read the full file on GitHub · 471 lines

Files

What ships with it

14 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2mo ago First seen · 471 lines · 122 tokens per session scan A a915770a1a86

Subscribe to this mod's changes

swift-security-expert is a skill published in the GitHub repository ivan-magda/swift-security-skill (40 stars, last pushed 4mo ago), licensed MIT. It adds 122 tokens to every session and 10,310 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Claude Code Mobile Security agent-skill biometric-authentication cryptokit ios keychain

swift-security-expert next to 6 skills from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
swift-security-expertivan-magda/swift-security-skill	Skill	40	4mo ago	MIT	A	122	Claude Code
scenekit-product-stagesdembsky/PropMotion	Skill	114	2mo ago	MIT	A	306	Claude Code, Codex
storescreensciscoriordan/storescreens-skill	Skill	2	15d ago	MIT	A	36	Claude Code, Codex
analyzing-ios-app-security-with-objectionautohandai/community-skills	Skill	13	3mo ago	Apache-2.0	A	99	Claude Code, Codex
analyzing-ios-app-security-with-objectionmukul975/Anthropic-Cybersecurity-Skills	Skill	36k	2mo ago	Apache-2.0	A	49	Claude Code
ios-simulator-skillconorluddy/ios-simulator-skill	Skill	1.3k	yesterday	MIT	A	106	Claude Code, Codex
argent-tv-interactsoftware-mansion/argent	Skill	3.2k	yesterday	Apache-2.0	A	107	Claude Code, Codex