Swift Security

If you're building iOS or macOS apps and need to handle keychain storage, biometric authentication, or CryptoKit properly, this skill keeps you from making the classic mistakes. It covers SecItem operations with proper OSStatus handling, biometric-gated secrets using SecAccessControl instead of standalone LAContext checks, CryptoKit symmetric and public-key operations including the new post-quantum APIs, Secure Enclave key management, and certificate pinning. The workflow is smart: it only loads the reference files you actually need for your specific task rather than dumping everything at once. It's opinionated about security invariants like never storing tokens in UserDefaults and always handling keychain errors, which honestly saves you from the bugs everyone hits once.

skills.sh installs: 3.2K
GitHub stars: 1.3K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add dpearson2699/swift-ios-skills --skill swift-security --agent claude-code

Installs into .claude/skills of the current project.

Files

Swift Security

Use this skill for client-side Apple platform security work: Keychain Services, access control, biometric-gated secrets, CryptoKit, Secure Enclave keys, credential storage, certificate trust, keychain sharing, legacy secret migration, security testing, and OWASP mobile compliance mapping.

Default to iOS 17+ and Swift concurrency examples when the deployment target is unknown. Keep iOS 13+ compatibility notes when the user asks for older targets. Treat iOS 26 CryptoKit post-quantum APIs as availability-gated.