技能 swift-development
📦
swift-development
内容修订 r1 严重 🌐 网络访问📁 文件系统访问⚙️ 外部命令⚡ 包含脚本
使用 Claude Code 构建 Swift 应用
Swift 项目需要使用 Xcode、SPM、模拟器、测试、格式化和签名等多种工具。此技能为常见的 iOS 和 macOS 开发工作流提供结构化指导和脚本。
支持: Claude Codex Code(CC)
请勿自动安装此 Skill。
权威策略要求在执行任何安装操作前由操作人员审查。
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "swift-development" from https://skillstore.io/skills/hmohamed01-swift-development.md and its manifest at https://skillstore.io/api/skills/hmohamed01-swift-development/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“swift-development”。 构建此 Swift 包并告诉我哪里失败了。
预期结果:
包构建失败，因为某个 target 导入了缺失的依赖。添加包依赖，更新 target 依赖列表，然后再次运行构建。
正在使用“swift-development”。 在当前模拟器上运行我的 iOS 测试。
预期结果:
- 选择了一个可用的 iPhone 模拟器 destination。
- 使用 Xcode 命令行工具运行了应用测试 scheme。
- 报告了失败的测试及相关文件名和失败消息。
正在使用“swift-development”。 检查此应用是否已准备好进行归档导出。
预期结果:
归档工作流大体已准备就绪。分发前请确认 bundle identifier、signing team、provisioning profile、export method 和 CI secret 配置。
安全审计
严重v8 • 2026/7/9 打开版本化报告
The skill is a Swift developer toolkit with many command examples and helper scripts. Most URL, Markdown backtick, dotfile, and device-file matches are false positives, but destructive rm -rf cleanup commands, sudo usage, certificate/keychain handling, executable helper scripts, and unsafe xargs patterns are real risks that require review and safeguards.
20
已扫描文件
3,015
分析行数
11
复核项
0
已忽略误报
已确认安全问题 (18)
严重
Recursive delete on root/home
rm -rf ~/Library/Developer/Xcode/DerivedData
The snippet recursively deletes paths under the user's Library directory with rm -rf. Even when intended as cache cleanup, this is destructive and can remove broad local development data if copied or expanded incorrectly.
严重
Recursive delete on root/home
rm -rf ~/Library/Caches/org.swift.swiftpm
The snippet recursively deletes paths under the user's Library directory with rm -rf. Even when intended as cache cleanup, this is destructive and can remove broad local development data if copied or expanded incorrectly.
严重
Recursive delete on root/home
rm -rf ~/Library/Developer/Xcode/DerivedData
The snippet recursively deletes paths under the user's Library directory with rm -rf. Even when intended as cache cleanup, this is destructive and can remove broad local development data if copied or expanded incorrectly.
严重
Recursive delete on root/home
rm -rf ~/Library/Caches/org.swift.swiftpm
The snippet recursively deletes paths under the user's Library directory with rm -rf. Even when intended as cache cleanup, this is destructive and can remove broad local development data if copied or expanded incorrectly.
严重
Recursive delete on root/home
rm -rf ~/Library/Caches/org.swift.swiftpm
The snippet recursively deletes paths under the user's Library directory with rm -rf. Even when intended as cache cleanup, this is destructive and can remove broad local development data if copied or expanded incorrectly.
严重
Recursive delete on root/home
rm -rf ~/Library/Developer/CoreSimulator/Caches
The snippet recursively deletes paths under the user's Library directory with rm -rf. Even when intended as cache cleanup, this is destructive and can remove broad local development data if copied or expanded incorrectly.
严重
Recursive delete on root/home
rm -rf ~/Library/Developer/Xcode/DerivedData/*/Index
The snippet recursively deletes paths under the user's Library directory with rm -rf. Even when intended as cache cleanup, this is destructive and can remove broad local development data if copied or expanded incorrectly.
严重
Recursive delete on root/home
rm -rf ~/Library/Caches/org.swift.swiftpm
The snippet recursively deletes paths under the user's Library directory with rm -rf. Even when intended as cache cleanup, this is destructive and can remove broad local development data if copied or expanded incorrectly.
显示全部 18 条已确认问题
严重
Recursive delete on root/home
rm -rf ~/Library/Developer/Xcode/DerivedData/*/SourcePackages
The snippet recursively deletes paths under the user's Library directory with rm -rf. Even when intended as cache cleanup, this is destructive and can remove broad local development data if copied or expanded incorrectly.
严重
Recursive delete on root/home
rm -rf ~/Library/Developer/Xcode/DerivedData
The snippet recursively deletes paths under the user's Library directory with rm -rf. Even when intended as cache cleanup, this is destructive and can remove broad local development data if copied or expanded incorrectly.
严重
Recursive delete on root/home
rm -rf ~/Library/Developer/Xcode/DerivedData
The snippet recursively deletes paths under the user's Library directory with rm -rf. Even when intended as cache cleanup, this is destructive and can remove broad local development data if copied or expanded incorrectly.
严重
Recursive delete on root/home
rm -rf ~/Library/Caches/org.swift.swiftpm
The snippet recursively deletes paths under the user's Library directory with rm -rf. Even when intended as cache cleanup, this is destructive and can remove broad local development data if copied or expanded incorrectly.
严重
Recursive delete on root/home
rm -rf ~/Library/Developer/CoreSimulator/Caches
The snippet recursively deletes paths under the user's Library directory with rm -rf. Even when intended as cache cleanup, this is destructive and can remove broad local development data if copied or expanded incorrectly.
高
Certificate/key files
security create-keychain -p "$KEYCHAIN_PASSWORD" build.keychain
The command sequence creates, unlocks, and imports signing certificates into a build keychain. Handling certificate material and keychain passwords is sensitive and can expose signing credentials if misused.
高
Certificate/key files
security default-keychain -s build.keychain
The command sequence creates, unlocks, and imports signing certificates into a build keychain. Handling certificate material and keychain passwords is sensitive and can expose signing credentials if misused.
高
Certificate/key files
security unlock-keychain -p "$KEYCHAIN_PASSWORD" build.keychain
The command sequence creates, unlocks, and imports signing certificates into a build keychain. Handling certificate material and keychain passwords is sensitive and can expose signing credentials if misused.
高
Certificate/key files
security import certificate.p12 -k build.keychain \
The command sequence creates, unlocks, and imports signing certificates into a build keychain. Handling certificate material and keychain passwords is sensitive and can expose signing credentials if misused.
高
Certificate/key files
-s -k "$KEYCHAIN_PASSWORD" build.keychain
The command sequence creates, unlocks, and imports signing certificates into a build keychain. Handling certificate material and keychain passwords is sensitive and can expose signing credentials if misused.
能力复核项 (11)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
高
sudo privilege escalation
run: sudo xcode-select -s /Applications/Xcode_15.4.app
The snippet instructs use of sudo for Xcode selection or simulator service control. This is legitimate developer administration, but it still asks for elevated privileges and should require explicit user confirmation.
高
sudo privilege escalation
run: sudo xcode-select -s /Applications/Xcode_${{ matrix.xcode }}.app
The snippet instructs use of sudo for Xcode selection or simulator service control. This is legitimate developer administration, but it still asks for elevated privileges and should require explicit user confirmation.
高
sudo privilege escalation
sudo killall -9 com.apple.CoreSimulator.CoreSimulatorService
The snippet instructs use of sudo for Xcode selection or simulator service control. This is legitimate developer administration, but it still asks for elevated privileges and should require explicit user confirmation.
高
sudo privilege escalation
sudo xcode-select -s /Applications/Xcode.app/Contents/Developer
The snippet instructs use of sudo for Xcode selection or simulator service control. This is legitimate developer administration, but it still asks for elevated privileges and should require explicit user confirmation.
中
xargs command (can execute arbitrary commands)
echo "$STAGED_FILES" | xargs swiftformat
The hook pipes git-derived filenames into xargs without a null-delimited form or option separator. This is common tooling, but unusual filenames can be misinterpreted as tool options.
中
xargs command (can execute arbitrary commands)
echo "$STAGED_FILES" | xargs git add
The hook pipes git-derived filenames into xargs without a null-delimited form or option separator. This is common tooling, but unusual filenames can be misinterpreted as tool options.
中
xargs command (can execute arbitrary commands)
echo "$STAGED_FILES" | xargs swiftlint --strict
The hook pipes git-derived filenames into xargs without a null-delimited form or option separator. This is common tooling, but unusual filenames can be misinterpreted as tool options.
中
Unix shell invocation
#!/bin/bash
This file is an executable shell helper included with the skill. Shell execution is expected for Swift tooling, but it expands the skill's local command execution surface.
中
Unix shell invocation
#!/bin/bash
This file is an executable shell helper included with the skill. Shell execution is expected for Swift tooling, but it expands the skill's local command execution surface.
中
Unix shell invocation
#!/bin/bash
This file is an executable shell helper included with the skill. Shell execution is expected for Swift tooling, but it expands the skill's local command execution surface.
中
Unix shell invocation
#!/bin/bash
This file is an executable shell helper included with the skill. Shell execution is expected for Swift tooling, but it expands the skill's local command execution surface.
风险因素
🌐 网络访问 (23)
assets/ExportOptions/ad-hoc.plist:2 assets/ExportOptions/app-store.plist:2 assets/ExportOptions/development.plist:2 assets/Package.swift.template:14 references/architecture.md:109 references/architecture.md:269 references/concurrency.md:116 references/simctl.md:83 references/spm.md:33 references/spm.md:34 SKILL.md:129 SKILL.md:130 SKILL.md:131 SKILL.md:132 SKILL.md:142 SKILL.md:143 SKILL.md:144 SKILL.md:145 SKILL.md:146 SKILL.md:147 SKILL.md:159 SKILL.md:160 SKILL.md:161
📁 文件系统访问 (35)
references/architecture.md:407 references/cicd.md:218 references/cicd.md:225 references/spm.md:35 scripts/format_and_lint.sh:51 scripts/format_and_lint.sh:71 scripts/format_and_lint.sh:94 scripts/new_package.sh:38 scripts/new_package.sh:141 scripts/new_package.sh:151 scripts/new_package.sh:153 scripts/new_package.sh:177 scripts/new_package.sh:179 scripts/new_package.sh:26 scripts/new_package.sh:57 scripts/new_package.sh:76 scripts/new_package.sh:103 scripts/new_package.sh:104 scripts/new_package.sh:156 scripts/new_package.sh:157 scripts/new_package.sh:207 scripts/new_package.sh:213 scripts/run_tests.sh:32 scripts/run_tests.sh:71 scripts/run_tests.sh:73 scripts/run_tests.sh:83 scripts/run_tests.sh:102 scripts/run_tests.sh:129 scripts/simulator.sh:35 scripts/simulator.sh:40 scripts/simulator.sh:59 scripts/simulator.sh:70 scripts/simulator.sh:71 SKILL.md:203 SKILL.md:204
⚙️ 外部命令 (50)
references/cicd.md:211 references/cicd.md:108 references/cicd.md:140 references/cicd.md:208 references/cicd.md:220 references/cicd.md:221 references/cicd.md:227 references/cicd.md:24 references/cicd.md:97 references/troubleshooting.md:64 references/xcodebuild.md:125 scripts/format_and_lint.sh:1 scripts/new_package.sh:37 scripts/new_package.sh:40 scripts/new_package.sh:57 scripts/new_package.sh:76 scripts/new_package.sh:104 scripts/new_package.sh:1 scripts/run_tests.sh:71 scripts/run_tests.sh:73 scripts/run_tests.sh:76-78 scripts/run_tests.sh:95-97 scripts/run_tests.sh:1 scripts/simulator.sh:119 scripts/simulator.sh:1 SKILL.md:19 SKILL.md:20 SKILL.md:26-32 SKILL.md:32-36 SKILL.md:36-47 SKILL.md:47-51 SKILL.md:51-57 SKILL.md:57-61 SKILL.md:61-67 SKILL.md:67-75 SKILL.md:75-92 SKILL.md:92-96 SKILL.md:96-107 SKILL.md:107-111 SKILL.md:111-117 SKILL.md:117-151 SKILL.md:151-153 SKILL.md:153 SKILL.md:158-159 SKILL.md:159-160 SKILL.md:160-161 SKILL.md:161-191 SKILL.md:191-192 SKILL.md:192-193 SKILL.md:193-194
⚡ 包含脚本 (1)
检测到的模式
Recursive delete on root/home×13
审计者: claude 查看审计历史 →
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/hmohamed01-swift-development/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/hmohamed01-swift-development?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/hmohamed01-swift-development?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/hmohamed01-swift-development/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/hmohamed01-swift-development.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
hmohamed01. (2026). swift-development security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/hmohamed01-swift-development/audits/8BibTeX 引用
@techreport{hmohamed01-hmohamed01-swift-development-2026,
author = {hmohamed01},
title = {swift-development security audit report (audit version 8)},
institution = {Skillstore},
year = {2026},
number = {8},
url = {https://skillstore.io/skills/hmohamed01-swift-development/audits/8},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "swift-development security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
- name: "hmohamed01"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/hmohamed01-swift-development/audits/8"
identifiers:
- type: other
value: "skillstore:hmohamed01-swift-development:audit:8"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中 82
架构
85
可维护性
87
内容
75
社区
83
规范符合性
你能构建什么
设置 Swift 包
创建新的 Swift 包，并提供格式化、lint、测试和常见项目结构指导。
运行和调试应用测试
使用 Xcode、SPM、XCTest、Swift Testing 和模拟器命令来构建和测试 iOS 或 macOS 项目。
准备应用交付工作流
在分发 Apple 平台应用之前，检查归档、导出、CI、预置和代码签名步骤。
试试这些提示
构建我的 Swift 包
使用 Swift 开发技能检查此包，构建它，并用简单的语言解释任何构建错误。
在模拟器上运行测试
使用 Swift 开发技能查找 Xcode 项目或 workspace，选择一个模拟器 destination，并运行测试套件。
改进 SwiftUI 架构
使用 Swift 开发技能审查此 SwiftUI 功能的 MVVM 边界、状态处理、导航和 async 数据加载。
准备已签名的发布构建
使用 Swift 开发技能审计用于 TestFlight 发布的归档、导出选项、预置和 CI 签名步骤。
最佳实践
- 在运行会删除文件、更改 Xcode selection 或需要 sudo 的命令之前，请先请求确认。
- 在进行发布或 CI 更改之前，先运行格式化、lint 和测试。
- 将签名凭据保存在安全的 secret 存储中，并避免在日志中打印它们。
避免
- 不要在未审查确切目标路径的情况下运行破坏性的缓存清理命令。
- 不要假设每台机器都安装了最新的模拟器或 Xcode 版本。
- 不要将签名身份或预置值硬编码到共享项目文件中。
常见问题
此技能是否需要 macOS？
大多数构建、Xcode、模拟器和签名工作流都需要安装了 Xcode 的 macOS。一些 Swift Package Manager 任务可以在 Linux 上运行。
它能创建新的 Swift 包吗？
可以。它包含包设置指导，以及用于创建包含常见格式化和 lint 文件的包的辅助脚本。
它能运行 iOS 模拟器测试吗？
可以，前提是有可用的 Xcode 和合适的模拟器 runtime。它可以指导 destination 选择和测试命令用法。
它是否安全地管理 Apple 签名凭据？
它记录了签名工作流，但用户必须安全地提供证书和 secret。Agent 不应暴露或记录 secret 值。
为什么有些命令会在审计中被标记？
此技能包含 shell 脚本、sudo 示例和缓存删除命令。这些很有用，但在执行前需要用户明确审查。
它是否同时支持 Claude 和 Codex？
是的。报告列出了对 Claude、Codex 和 Claude Code 的支持，因为这些指导基于文本和命令。