Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add SteveGJones/ai-first-sdlc-practices --skill ios-scaffoldgit clone --depth 1 https://github.com/SteveGJones/ai-first-sdlc-practicesWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/stevegjones/ai-first-sdlc-practices/ios-scaffold)<a href="https://agentmods.dev/skills/stevegjones/ai-first-sdlc-practices/ios-scaffold"><img src="https://agentmods.dev/badge/skills/stevegjones/ai-first-sdlc-practices/ios-scaffold/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/stevegjones/ai-first-sdlc-practices/ios-scaffold"><img src="https://agentmods.dev/badge/skills/stevegjones/ai-first-sdlc-practices/ios-scaffold.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00070 | $0.01072 |
| Opus 5 | $0.00035 | $0.00536 |
| Sonnet 5 | $0.00014 | $0.00214 |
| Haiku 4.5 | $0.00007 | $0.00107 |
Grade A, and why
ios-scaffold scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 86 lines — stays where its author put it; the contents beside it link to each section on GitHub.
iOS Scaffold
Create a new iOS app project that is submission-safe from the first commit — so it doesn't hit the
TestFlight/App Store blockers ios-testflight-release and the pre-flight checker exist to catch.
Belongs to the sdlc-team-ios plugin; pairs with swiftui-architect (structure) and
swift-language-expert (language).
Arguments
app-name— the app / bundle name (defaults to asking).
Steps
1. Choose the project-generation approach
Prefer a diffable, mergeable project definition over a hand-managed .xcodeproj:
- Swift Package Manager (an app built as a package + a thin app target) for library-first / simple apps.
- Tuist or XcodeGen to generate the
.xcodeprojfrom a committed manifest (Tuist'sProject.swift, or an XcodeGen YAML manifest) that is committed, so project changes review cleanly and don't cause merge conflicts.
Ask which the team prefers; default to XcodeGen/Tuist for an app that needs a real Xcode project.
2. Establish structure
- App target + unit-test target (Swift Testing) + optional UI-test target (XCUITest).
- A SwiftPM feature-module layout if the app is non-trivial (feature packages + Core/DesignSystem/
Models; thin app composition root) — see
swiftui-architect. .gitignorecovering*.xcodeproj(if generated),DerivedData/,.build/,*.xcuserstate,.DS_Store, and any secrets file.
3. Wire submission-safe Info.plist defaults (this is the point of the skill)
Pre-set the keys the pre-flight checker looks for, so uploads don't stall or get rejected later:
ITSAppUsesNonExemptEncryption = false(if the app uses only exempt encryption such as standard HTTPS) — skips the export-compliance questionnaire on every upload.- A
NS…UsageDescriptionplaceholder-with-a-real-sentence for each capability the app will use (add them as you add frameworks; the pre-flight check maps CoreMotion→NSMotionUsageDescription, etc.). Leave a comment reminding that these must be real human sentences. - Set the deployment target to the team's minimum-supported iOS per policy (and keep it consistent
across targets and
Package.swift).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 86 lines · 70 tokens per session scan A 2ff4faf694db
ios-scaffold is a skill published in the GitHub repository SteveGJones/ai-first-sdlc-practices (41 stars, last pushed 1mo ago), licensed MIT. It adds 70 tokens to every session and 1,072 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
mobiai-android-testing
Use when writing or running tests in an Android project — unit tests, UI tests, choosing the right framework and patterns.
flutter-testing-skill
Generates Flutter widget tests, integration tests, and golden tests in Dart. Supports local execution and TestMu AI cloud for real device testing. Use when user mentions "Flutter", "widget test", "WidgetTester", "testWidgets", "fluttertest", "integrationtest". Triggers on: "Flutter", "widget test", "Dart test"…
rn-testing
Testing React Native: Jest with jest-expo / react-native preset, React Testing Library Native, native module mocking, hook testing. Optional sections for Detox (native automation) and Maestro (declarative YAML e2e). Use this skill to: Configure Jest preset based on workflow. Write component tests with…
testing-reactnative
Testing React Native 0.85+. Use when writing tests, reviewing test coverage, or setting up testing.
setting-up-host-vs-device-tests
Use this skill to choose between host (Robolectric/JVM) and device (instrumentation) tests for Jetpack Compose, and to configure each correctly. Covers the androidHostTest (a.k.a. src/test/) vs androidDeviceTest (a.k.a. src/androidTest/) source set split, what each flavor can and cannot drive (RenderThread…
flutter-tester
Use when creating, writing, fixing, or reviewing tests in a Flutter project. Covers unit tests, widget tests, integration tests, Riverpod provider testing, and Mockito mocking. Provides Given-When-Then patterns, layer isolation strategies, and test setup for GetIt, SharedPreferences, and FakeDatabase.