audit-xcode-security-settings — Claude Code skill: what it does
Runs a security pass over an Xcode project's build settings and switches on Clang warnings, analyzer checkers and Enhanced Security in stages. Useful when you need to harden a project.
npx skills add superagents-lab/xcode27-skills --skill audit-xcode-security-settings -a claude-codeWhat audit-xcode-security-settings does
The skill works through an Xcode project's build settings and turns on the security-relevant ones: Clang warnings, static analyzer checkers, Enhanced Security. Discovery, edits, questions about whatever stayed disabled, validation and a written report follow as numbered phases. Decisions land in xcode-security-settings.md. Languages come from file extensions: C, C++, Objective-C, Objective-C++, Swift.
Edits use whatever configuration the project already has. .xcconfig files get changed directly. A .pbxproj-only project goes through UpdateTargetBuildSetting and UpdateProjectBuildSetting. No second configuration method gets introduced. ENABLE_ENHANCED_SECURITY is the one exception, since it has to sit at project level.
TLS/ATS networking, code signing and privacy APIs are outside its scope. Inside the project, ls and find are banned whenever XcodeGlob, XcodeGrep, XcodeRead and XcodeLS exist, because the shell tools trigger extra permission prompts. Large GetTargetBuildSettings output gets filtered by scripts/filter_build_settings.py instead of being read top to bottom.
What it helps with
- turn on Clang warnings the project has never checked
- add static analyzer checkers without clicking through build settings
- set Enhanced Security at project level instead of per target
- record each setting decision in
xcode-security-settings.md - filter a huge
GetTargetBuildSettingsdump through the script
Example prompts for the agent
- Audit the security settings in this Xcode project and enable the compiler warnings it is missing.
- Turn on Enhanced Security and the static analyzer checkers, then write the decisions to
xcode-security-settings.md. - Which security build settings are still off in the
.pbxproj?
How to install audit-xcode-security-settings
1Skills CLI (Vercel)
npx skills add superagents-lab/xcode27-skills --skill audit-xcode-security-settings -a claude-code2Manually: put the files in place
~/.claude/skills/audit-xcode-security-settings/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/audit-xcode-security-settings/
1Skills CLI (Vercel)
npx skills add superagents-lab/xcode27-skills --skill audit-xcode-security-settings -a codex2Manually: put the files in place
.agents/skills/audit-xcode-security-settings/SKILL.mdFor all projects use ~/.agents/skills/
1Skills CLI (Vercel)
npx skills add superagents-lab/xcode27-skills --skill audit-xcode-security-settings -a cursor2Manually: put the files in place
.cursor/skills/audit-xcode-security-settings/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install superagents-lab/xcode27-skills audit-xcode-security-settings2Manually: put the files in place
.github/skills/audit-xcode-security-settings/SKILL.md1Skills CLI (Vercel)
npx skills add superagents-lab/xcode27-skills --skill audit-xcode-security-settings -a gemini-cli2Platform CLI
gemini skills install https://github.com/superagents-lab/xcode27-skills --path audit-xcode-security-settingsManually: put the files in place
.devin/skills/audit-xcode-security-settings/SKILL.mdThe legacy .windsurf/skills/ path still works
Skills CLI (Vercel)
npx skills add superagents-lab/xcode27-skills --skill audit-xcode-security-settings -a opencodeClaude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
Step by step, with commands for each platform: How to install skills in Claude Code: five ways
Questions about audit-xcode-security-settings
How do I install audit-xcode-security-settings in Claude Code?
Run npx skills add superagents-lab/xcode27-skills --skill audit-xcode-security-settings -a claude-code. The skill file then sits at ~/.claude/skills/audit-xcode-security-settings/SKILL.md.
What does audit-xcode-security-settings do?
It reviews an Xcode project's build configuration and enables security options step by step: compiler warnings, analyzer checkers, Enhanced Security. Each decision is logged in xcode-security-settings.md.
Which languages does the skill cover?
C, C++, Objective-C, Objective-C++ and Swift, detected from the file extensions present in the project.
