Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add jeremieb/swift-unit-test-instructions --skill swift-code-reviewgit clone --depth 1 https://github.com/jeremieb/swift-unit-test-instructionsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jeremieb/swift-unit-test-instructions/swift-code-review)<a href="https://agentmods.dev/skills/jeremieb/swift-unit-test-instructions/swift-code-review"><img src="https://agentmods.dev/badge/skills/jeremieb/swift-unit-test-instructions/swift-code-review/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/jeremieb/swift-unit-test-instructions/swift-code-review"><img src="https://agentmods.dev/badge/skills/jeremieb/swift-unit-test-instructions/swift-code-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00083 | $0.01439 |
| Opus 5.5 | $0.00033 | $0.00576 |
| Sonnet 5.5 | $0.00017 | $0.00288 |
| Haiku 4.5 | $0.00008 | $0.00144 |
Grade A, and why
swift-code-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 157 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Swift Code Review
Instructions
Step 1: Read All Provided Files
Read every file mentioned or pasted before writing any comments. Do not review code you have not fully read.
If reviewing a PR, ask for:
- The feature or bug being fixed
- The files changed
- Any context about constraints or trade-offs
Step 2: Apply the Review Checklist
Architecture (MVVM)
- Business logic is in ViewModel or Service — not in View/ViewController body
- External dependencies (network, storage, time) are injected via protocol, not hardcoded
- No
URLSession.shared,UserDefaults.standard, orDate()called directly from Views - No global singletons used without injection support
- Thin View layer: no conditional business logic, no data fetching in
onAppearwithout ViewModel delegation
Swift Quality
- No force unwraps (
!) in production paths - Errors propagated via
throwsorResult— not silently swallowed -
letpreferred overvarwhere value does not change - No magic numbers or hardcoded strings — use named constants or localizable strings
- One primary type per file
Concurrency
-
async/awaitused for all new async code (not completion handlers) -
@MainActorapplied to ViewModel and any type that updates UI state - No
DispatchQueue.main.asyncin ViewModel or Service layers - No
sleep()anywhere -
Sendableconformance considered for types crossing actor boundaries -
Taskobjects are stored and cancelled if the parent scope is deallocated
Testing
- New business logic has corresponding tests
- New dependencies are injectable (protocol-backed)
- Existing tests still compile and pass
- No test changes that weaken coverage of critical paths
Naming
- Types:
UpperCamelCase - Functions / variables:
lowerCamelCase - Booleans: assertion form (
isLoading,hasError,canSubmit,isPremium) - Avoid abbreviations unless universally understood (
url,id,api) - Test methods:
test_when_<Condition>_should_<ExpectedOutcome>() - Protocol names: noun or adjective, not
Protocolsuffix (preferUserRepositoryoverUserRepositoryProtocolwhere unambiguous, butProtocolsuffix is acceptable for clarity)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 157 lines · 83 tokens per session scan A 612b72347351
swift-code-review is a skill published in the GitHub repository jeremieb/swift-unit-test-instructions (4 stars, last pushed 8mo ago), licensed MIT. It adds 83 tokens to every session and 1,439 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
code-reviewer
Code review practices including review checklists, refactoring patterns, PR best practices, and team conventions. Trigger for code review guidance, refactoring advice, or PR process design.
offensive-mobile
Mobile (Android + iOS) application penetration testing methodology. Covers static analysis (apktool/jadx for Android, class-dump/Hopper/IDA for iOS), dynamic instrumentation with Frida and Objection, SSL pinning bypass strategies, root/jailbreak detection bypass, deep-link / URL-scheme abuse, exported component…
audit-pr
Audit a whole PR against the delivery contract and return MERGE-READY or evidenced blockers with the full URL. Consumes the current review-change REVIEW-PASS receipt instead of re-running review axes; posts a SHA-bound ready comment; never edits or merges. Triggers: "audit-pr", "is this PR ready", "merge gate".
fold-findings
Repair persisted fix-now findings in compatible atomic batches: root-cause fixes, green gate, commit/push, and per-row folded: yes updates. Never reclassify or substitute backlog notes. Triggers: "fold-findings", "fix the review findings", "repair audit blockers".
capstone-radar
Unified A-F grading and ship/no-ship decisions for the 6-skill radar family (5 companions + capstone). Aggregates handoffs from data-model, ui-path, roundtrip, time-bomb, and ui-enhancer; owns 5 grep-reliable domains; tracks velocity; celebrates improvements. Triggers: "capstone radar", "can I ship", "grade codebase"…
review-change
Review a change with only applicable internal axes, classify every finding, persist fix-now work, and return one evidence-backed decision. Findings only; --adversarial N uses isolated reviewers; --synthesize fuses supplied reviewer tables. Triggers: "review-change", "review this change", "adversarial review".