swiftfindrefs
v1.0.5Use swiftfindrefs (IndexStoreDB) to list every Swift source file referencing a symbol. Mandatory for “find references”, “fix missing imports”, and cross-module refactors. Do not replace with grep/rg or IDE search.
⭐ 1· 1.8k·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description, and runtime instructions consistently describe using the swiftfindrefs IndexStoreDB tool to find Swift references. The declared preconditions (macOS, Xcode, DerivedData, swiftfindrefs on PATH) match the stated purpose; no unrelated capabilities or credentials are requested.
Instruction Scope
SKILL.md confines behavior to running swiftfindrefs, interpreting its file-list output, and optionally editing only the returned files (e.g., adding imports). It references DerivedData/IndexStore paths and local file edits — expected for this task. There are no instructions to read unrelated system files, send data to external endpoints, or access secrets.
Install Mechanism
The skill is instruction-only and does not perform an automated install. The README suggests using a brew tap pointing at a third‑party GitHub repo (michaelversus/SwiftFindRefs). That is a plausible install route, but because the tap is third‑party you should inspect the repository or prefer an official release before running brew tap/install.
Credentials
No environment variables, credentials, or config paths are declared or required. The skill implicitly requires filesystem and command execution access (to read DerivedData, run swiftfindrefs, and edit returned source files), which is proportionate to its purpose.
Persistence & Privilege
The skill is not forced always-on (always: false) and does not request persistent elevated privileges or modify other skills. Model invocation is allowed (the platform default) and appropriate for a user-invocable tooling skill.
Assessment
This skill is coherent and appears to do what it says: run the swiftfindrefs tool and act only on the files it reports. Before installing or running anything: (1) verify the swiftfindrefs binary source (the SKILL suggests a third‑party brew tap on GitHub) — review that repository and its releases; (2) run swiftfindrefs manually on a small project to confirm output; (3) be aware the agent will need local filesystem and command execution rights to read DerivedData and edit source files — grant those only if you trust the tool and environment. If you want extra caution, run the tool yourself and let the agent operate only on its output rather than installing a new binary automatically.Like a lobster shell, security has layers — review code before you run it.
1.0.4vk978s56rjnrhn03aqgg7qpxxk9809ht2latestvk97e6b6947edtv7w5655mq952h809ye3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.