Skills Explorer Add Skills

developing-ios-apps

An agent skill by daymade, from daymade/claude-code-skills. Tags: debugging, deployment, development, ios, swift.

What it does

Develops iOS/macOS apps with XcodeGen, SwiftUI, and SPM, including Apple Developer signing, notarization, and CI/CD pipelines. Use when building iOS/macOS apps, fixing Xcode build failures, deploying to real devices, or configuring CI/CD signing. Triggers on XcodeGen project.yml, SPM dependency issues, code signing errors (Error -25294, keychain mismatch, adhoc fallback, EMFILE, notarization credential conflict), "Library not loaded @rpath", Electron @electron/osx-sign / @electron/notarize, notarytool, or certificate/provisioning problems.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add daymade/claude-code-skills --skill developing-ios-apps

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/daymade/claude-code-skills
cp -r claude-code-skills/daymade-macos/developing-ios-apps ~/.claude/skills/developing-ios-apps

Safety box score

Grade D, elevated risk: 58 of 100 risk points, rated 2026-09-26. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill is a build/sign/deploy playbook for iOS/macOS apps, with lots of shell commands for Xcode, signing, notarization, and CI. The main risks are handling private signing credentials, deleting user-side build caches outside the repo, changing global git settings, and triggering release automation to external services.

Category levels, from 0 (none) to 3 (high)
CategoryLevelWhy
Code & shell execution2 (moderate)It is command-driven (`xcodegen generate`, `xcodebuild`, `codesign`, `security`, `spctl`, `gh api`) and the referenced CI snippets run shell code on the local machine, though they are standard build tools rather than arbitrary code loaders.
Network access2 (moderate)It pulls dependencies from GitHub package URLs, talks to Apple Developer/App Store Connect, and can dispatch GitHub releases; the guide also suggests global proxy settings for package resolution.
Filesystem reach3 (high)It explicitly deletes `~/Library/Developer/Xcode/DerivedData/PROJECT-*` with `rm -rf` and even pairs it with `pkill -9 Xcode && rm -rf ...`, which reaches outside the project and can remove user data if the path is wrong.
Secrets & credentials3 (high)It walks through CSR/private-key handling, importing certificates into the `login` keychain, exporting P12s, and storing `MACOS_CERT_P12`, `APPLE_API_KEY`, and related secrets for notarization and signing.
Privilege & persistence2 (moderate)It changes user-wide git configuration with `git config --global http.proxy ...` and `https.proxy ...`, and relies on Keychain/Xcode signing state outside the repo.
Instruction hijack surface0 (none)No prompt-injection or instruction-hiding content is present; the text is about build/signing workflows and does not tell the agent to ignore its rules or follow fetched instructions.
Irreversible actions2 (moderate)It includes device deployment, signing/notarization, and a release trigger that runs `gh api ... dispatches`, which can kick off downstream CI/CD after a branch/HEAD check.
Transparency0 (none)All reviewed content is plain markdown and code snippets; there are no binaries, minified blobs, or runtime-decoded payloads.

Before installing

Rated 2026-09-26 by an automated review of 6 files from the skill's repository.

Source

Repository
daymade/claude-code-skills (all skills from this repository)
Path
daymade-macos/developing-ios-apps/SKILL.md
Branch
main
Updated
2026-09-20