Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add mintuz/skills --skill ios-localize-copygit clone --depth 1 https://github.com/mintuz/skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mintuz/skills/ios-localize-copy)<a href="https://agentmods.dev/skills/mintuz/skills/ios-localize-copy"><img src="https://agentmods.dev/badge/skills/mintuz/skills/ios-localize-copy.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 21 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- medium Rogue Agent · line 55 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00082 | $0.01694 |
| Opus 5 | $0.00041 | $0.00847 |
| Sonnet 5 | $0.00016 | $0.00339 |
| Haiku 4.5 | $0.00008 | $0.00169 |
Grade A, and why
ios-localize-copy scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 87 lines — stays where its author put it; the contents beside it link to each section on GitHub.
iOS Localize Copy
Treat every localized string as a runtime contract.
1. Establish scope and locale truth
- Confirm whether the request is an edit, a review, or localized App Store metadata such as
whatsNew, fastlanerelease_notes.txt, or screenshot caption copy. Keep metadata outside scope unless the user requests it. When you find stale metadata, do not edit it. Name it in the handoff as a separate task. - Inspect Xcode
knownRegions, every relevant.xcstringscatalog, and App Store metadata locale directories or configuration. Record each locale set. Resolve mismatches from project evidence before you translate. When project evidence does not resolve a mismatch, ask the user to classify the locale before you translate. - Inspect repository guidance, the current diff, and existing localization validators. Preserve unrelated work.
- Audit before you edit. Load each catalog as JSON. Report keys against locales, the state counts (
translated,new,needs_review), and the exact list of missing keys for each locale.
Complete when every discovered locale is classified as supported or excluded with evidence, the permitted files are explicit, and the audit table exists.
2. Build the copy inventory
- Derive the target keys from the request and current diff.
- Trace each key or source literal to its call sites. Read the surrounding UI, comments, tests, and screenshots needed to identify audience, action, feature terminology, length constraints, plural rules, and tone.
- Record the catalog's declared source-language value, key, visible context, placeholders, URLs, Markdown link targets, and intentional whitespace for every target.
When an expected key is absent from the catalog, check these extraction rules before you add the key by hand:
- A string extracts into the catalog named by its
table:ortableName:argument. With no table argument it extracts intoLocalizable.xcstrings. A custom catalog name whose call sites pass no table name is the usual reason a catalog stays empty after a build. - The catalog file must have target membership. The target must set
SWIFT_EMIT_LOC_STRINGS = YESfor compiler extraction of APIs such asString(localized:). A SwiftUITextliteral also extracts throughLOCALIZED_STRING_SWIFTUI_SUPPORT, which defaults toYES, so check both settings before you blame the catalog. - Xcode never extracts a string that reaches the API through a plain
Stringvariable. Keep the literal inside a localizable API call, such asText("..."),String(localized: "..."), orLocalizedStringResource("..."). ALocalizedStringResourcevalue may then be stored and passed on. - A build emits
.stringsdata;xcstringstool syncmerges those keys into the catalog. Build the owning target. Locate only its emitted data withfind <DerivedData> -path '*/<Target>.build/*' -name '*.stringsdata'. Back up the catalog. Then runxcrun xcstringstool sync <catalog> --stringsdata <file> --skip-marking-strings-stale. Use default stale deletion only when removal is explicitly in scope. Inspect the structural diff before you accept the sync.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago Changed · +28 lines · +36 tokens per session cda5f8ee5253
- 8d ago First seen · 59 lines · 46 tokens per session scan A f74b00a0991d
ios-localize-copy is a skill published in the GitHub repository mintuz/skills (29 stars, last pushed 4d ago), licensed MIT. It adds 82 tokens to every session and 1,694 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
humanizar-texto-es
Elimina patrones de escritura típicos de IA en textos en español de España para que suenen naturales y humanos. Aplica esta skill siempre que generes, edites o revises textos en español: artículos, guías, tutoriales, emails, copy comercial, publicaciones en redes sociales, documentación, informes o cualquier prosa.…
azure-ai-translation-text-py
Azure AI Text Translation SDK for real-time text translation, transliteration, language detection, and dictionary lookup. Use for translating text content in applications. Triggers: "text translation", "translator", "translate text", "transliterate", "TextTranslationClient".
research
Conduct preliminary research on a topic and generate research outline. For academic research, benchmark research, technology selection, etc.
tiktok-shop-cross-border
Cross-border selling on TikTok Shop. Market selection, logistics setup, localization strategy, compliance requirements, and international expansion. Use when the user asks about TikTok Shop international selling, cross-border ecommerce, global expansion, or selling in multiple countries.
localization-testing
AI-powered localization and internationalization testing skill for e-commerce sites. Designs multi-language QA frameworks, currency validation checks, shipping info verification, and regional compliance audits.
subtitle-translator
Translate subtitle files (SRT, ASS) and video/media with embedded subtitles into any target language with high linguistic quality, sliding context window, timestamp alignment, and formatting preservation. Use when the user asks to translate a subtitle file (.srt, .ass) or video subtitles.