Menu
Security audit of current changes for iOS/Swift vulnerabilities and best practices
Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.
Baseado na classificação ocupacional SOC
Add a new screen to an existing feature module with Store, UI, factories, and tests
Add missing test cases, targeting a specific file or all changed files on the branch
Thorough pre-merge audit — dependency graph, correctness, conventions, security, test coverage, and improvement suggestions
Quick review of the current diff for bugs, logic errors, convention violations, and test gaps
Scaffold a new feature module with the appropriate layers and MESA conventions
Scaffold a new Strata interactor with interface, implementation, fake, and test
| name | security-check |
| description | Security audit of current changes for iOS/Swift vulnerabilities and best practices |
| disable-model-invocation | true |
| argument-hint | [--staged | --uncommitted] |
Perform a focused security audit on the current changes. Analyze the diff and the full content of changed files for security vulnerabilities, insecure patterns, and iOS-specific risks.
Scope: $ARGUMENTS
Determine which changes to audit:
--staged → git diff --cached (only staged changes)--uncommitted → git diff HEAD (only uncommitted changes)git diff main (all changes on the branch vs main, committed and uncommitted)Also run git status to identify new untracked files.
Read the diff output AND the full content of every changed file. Security issues often depend on context beyond the changed lines.
Info.plist, string literals, or configuration files committed to source.gitignore covers sensitive files (.env, .netrc, *.p12, *.mobileprovision)UserDefaults (use Keychain instead)Codable objects passed via TrapezioScreen properties (they're serializable)#Predicate)TrapezioState structs that could be logged or exposedURLSessionDelegate that accepts all certsNSAppTransportSecurity exceptions that weaken ATSNSPredicate or #Predicate with unsanitized user input@unchecked Sendable only used on interactor subclasses (not to suppress legitimate warnings)nonisolated(unsafe) only used on TrapezioStore.state (framework pattern)OSAllocatedUnfairLock usage is correct (balanced lock/unlock)print() statements logging sensitive data (passwords, tokens, PII)debugPrint() or dump() of sensitive objects#if DEBUGStrataException.message doesn't contain internal system details exposed to usersPackage.swift uses pinned or tested version rangesBrief assessment of the security posture of the changes.
Show all completed checklists from Steps 2-8 with pass/fail/not-applicable indicators. Skip entire sections that are not applicable to the changed files.
List by severity:
For each vulnerability:
If no issues are found, state that the changes pass the security audit.