skill CX Codex

security · rshankras — Claude Code skill: what it does, how to install

Q: How to install security in Claude Code?

Run `npx skills add rshankras/claude-code-apple-skills --skill security -a claude-code`.

A security category index for Apple platforms that routes prompts directly to the privacy-manifests skill.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓

npx skills add rshankras/claude-code-apple-skills --skill security -a claude-code

Open on GitHub

What security does

This skill acts as a category index for Apple platform security. General documentation on Keychain storage, biometric authentication, certificate pinning, and ATS was retired after blind testing confirmed modern models handle those topics natively. The index keeps only specialized areas where models still fail.

All active routing points to privacy-manifests. That skill handles PrivacyInfo.xcprivacy configuration, required-reason API usage, App Tracking Transparency declarations, and App Store submission checks. It inspects source trees using Read, Glob, and Grep.

Do not expect standard biometric code snippets here; the skill focuses strictly on App Store privacy manifests and tracking declarations.

What it helps with

inspect PrivacyInfo.xcprivacy files for App Store submissions
audit source code for required-reason API usage
configure App Tracking Transparency declarations
route agent security prompts to privacy manifest guidelines

Example prompts for the agent

Audit our iOS project for required-reason APIs and PrivacyInfo.xcprivacy requirements
Check if our App Tracking Transparency declarations match App Store submission rules

How to install security

1Skills CLI (Vercel)

npx skills add rshankras/claude-code-apple-skills --skill security -a claude-code

2Manually: put the files in place

~/.claude/skills/security/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/security/

1Skills CLI (Vercel)

npx skills add rshankras/claude-code-apple-skills --skill security -a codex

2Manually: put the files in place

.agents/skills/security/SKILL.md

For all projects use ~/.agents/skills/

1Skills CLI (Vercel)

npx skills add rshankras/claude-code-apple-skills --skill security -a cursor

2Manually: put the files in place

.cursor/skills/security/SKILL.md

Cursor also reads .agents/skills/ and .claude/skills/

1GitHub CLI

gh skill install rshankras/claude-code-apple-skills security

2Manually: put the files in place

.github/skills/security/SKILL.md

1Skills CLI (Vercel)

npx skills add rshankras/claude-code-apple-skills --skill security -a gemini-cli

2Platform CLI

gemini skills install https://github.com/rshankras/claude-code-apple-skills --path skills/security

Manually: put the files in place

.devin/skills/security/SKILL.md

The legacy .windsurf/skills/ path still works

Skills CLI (Vercel)

npx skills add rshankras/claude-code-apple-skills --skill security -a opencode

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about security

How to install security in Claude Code?

Run npx skills add rshankras/claude-code-apple-skills --skill security -a claude-code.

What does the security skill do?

It indexes Apple security topics and directs queries to the privacy-manifests skill for App Store compliance.

Why was Keychain and ATS guidance removed from this skill?

A July 2026 blind-test audit showed that current models already answer Keychain and ATS questions accurately without dedicated prompts.

Source text

SKILL.md · MIT

---
name: security
description: Security category index for Apple platforms. Routes to the privacy-manifests skill. General secure-storage/biometrics/ATS guidance was retired in the 2026 blind-test audit — current models cover it natively.
allowed-tools: [Read, Glob, Grep]
last_verified: 2026-07-16
review_by: 2027-06-22
---

# Security (category index)

General security guidance (Keychain patterns, biometric auth, certificate
pinning, ATS) was removed from this library after the 2026-07 blind-test
audit confirmed current models answer it correctly without a skill
(`tools/skill-audit/`, Fable-verified coverage 0.86). What remains here is
the material models get wrong or can't know.

## Available Skills

### privacy-manifests/
Privacy manifest audit — PrivacyInfo.xcprivacy format, required-reason APIs,
App Tracking Transparency declarations, and App Store submission requirements.

Similar skills

Everything for Security →

security by other authors comes first.

security boshu2 This skill reviews code, dependencies, secrets, and prompt surfaces for security risks. Use it for a pre-release review or a repository scan. CX Codex +1 1,400installs security parcadei A security audit skill: scans code for vulnerabilities, checks dependencies and secrets, then re-verifies after fixes. CX Codex +1 530installs security alinaqi Sets up preventive security rules, blocks secrets from leaking into client bundles, and configures pre-commit hooks. Useful when handling auth, user input, or API keys. CX Codex +1 426installs security cognitedata Walks a Flows app step by step, finds leaked secrets, unsafe DOM calls and auth gaps, then fixes each one in place. CX Codex +1 1,900installs security tartinerlabs Checks dependencies for CVEs, scans the working tree and git history for secrets, wires a scanner into pre-commit, and runs an OWASP pass over the repo. CX Codex +1 531installs app-store-featured appeeky A skill that walks through Apple's editorial process and helps you build a featuring pitch: what Apple looks for, when to send it, how to structure it. CX Codex +1 3,300installs swift-security dpearson2699 Guides AI agents through Apple Keychain, Secure Enclave, and CryptoKit workflows. Useful for securing client data storage on iOS and macOS. CX Codex +1 3,000installs Apple Shortcuts Integration Claude Office Skills Creates and runs Apple Shortcuts for iOS and macOS automation, with support for reminders, notes, and calendar workflows. CX Codex +1 4,700installs natural-language dpearson2699 A skill for on-device text work: tokenization, language detection, part-of-speech tags, entities, sentiment and translation in Apple apps. CX Codex +1 3,700installs swiftui-design nexu-io A skill that guides SwiftUI interface design by clear rules, avoiding typical AI-code mistakes. Directs design decisions, validates brand assets, and reviews layouts across five dimensions. CX Codex +1 2,900installs analyzing-ios-app-security-with-objection mahipal A skill for runtime iOS app testing with Objection and Frida: dump the keychain, bypass SSL pinning, check jailbreak detection. CX Codex +1 436installs

From the same set17

product-development Takes an app from idea to App Store: market research, PRD, architecture, UX, testing and release. Useful when you have a concept but no documents. CX Codex +1 553installs apple-intelligence Agent instructions for adding on-device LLM features, camera-based visual search and App Intents to an iOS or macOS app. CX Codex +1 516installs release-review Runs a macOS and iOS app through release checklists and returns a prioritised list of issues with concrete fixes. Useful before App Store or TestFlight submission. CX Codex +1 514installs generators Generates production-ready Swift code for iOS and macOS components, including StoreKit 2 paywalls, onboarding, logging, and SwiftData. CX Codex +1 494installs swift-development Reviews Swift concurrency, memory and code size: helps you migrate to Swift 6 strict mode and cut heap allocations. CX Codex +1 488installs legal Writes privacy policies, terms of service and EULAs around how your app actually handles data and which markets you ship to. CX Codex +1 484installs testing A set of TDD workflows and test infrastructure for Apple platform apps. Useful when an agent writes the code and you want tests around it. CX Codex +1 468installs shared Helps you write new skills and clean up existing ones: structure, front matter, splitting into modules. Useful once your agent starts losing track of your instructions. CX Codex +1 456installs