Axiom Security

Covers the full spectrum of iOS security work: keychain storage for credentials and tokens, CryptoKit for encryption and signing, passkey implementation, app attestation, file protection levels, and code signing for distribution. The decision tree is genuinely helpful for knowing whether your signing error belongs in keychain diagnostics or the build tooling. Good conflict resolution with related skills like networking (TLS vs payload signing) and data persistence (when to use keychain vs SwiftData). The reference docs include actual SecItem signatures and error codes, not just conceptual overviews. If you're doing anything with secrets, certificates, or cryptography on Apple platforms, this covers the modern API surface without the CommonCrypto baggage.

skills.sh installs: 1.3K
GitHub stars: 1.3K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add charleswiltgen/axiom --skill axiom-security --agent claude-code

Installs into .claude/skills of the current project.

Files

Security & Credentials

You MUST use this skill for ANY keychain, encryption, passkey, app integrity, agentic/AI feature security, file protection, or code signing work.

Auditors are skills here. Where this router says "Launch some-auditor agent", invoke the matching Codex skill instead — same procedure, no Claude Code agent required.

Available: axiom-scan-security-privacy.

The ones that shell out — builds, tests, simulators, crash symbolication — need shell access to run.