swiftfindrefs

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only Swift refactoring skill is coherent and purpose-aligned, but users should notice that it relies on a third-party local CLI installed via Homebrew/GitHub and strongly constrains how the agent searches and edits source files.

This skill appears safe to install if you trust the swiftfindrefs CLI source and want the agent to use IndexStore-based Swift reference discovery. Before installation, verify the Homebrew/GitHub source and remember that the agent will treat the tool's file list as authoritative for the covered refactoring workflows.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may refuse to use other search methods for covered Swift refactoring tasks and may stop if IndexStore/DerivedData resolution fails.

Why it was flagged

The skill intentionally forces a specific search workflow and disallows common alternatives. This is clear and aligned with the goal of accurate Swift reference discovery, but it changes the agent's default behavior.

Skill content
Always run `swiftfindrefs` before editing any files. ... Do not substitute `grep`, `rg`, IDE search, or filesystem heuristics for reference discovery.
Recommendation

Install only if you want the agent to prioritize IndexStore-based reference discovery over text search for these workflows.

What this means

During Swift reference-finding or refactoring tasks, the agent may run the local swiftfindrefs command and then inspect or edit the listed Swift files.

Why it was flagged

The skill directs the agent to run a local external CLI and base source-file edits on its output. This is central to the stated purpose and the workflows are scoped to returned files.

Skill content
swiftfindrefs \
  --projectName <XcodeProjectName> \
  --symbolName <SymbolName> \
  --symbolType <class|struct|enum|protocol|function|variable>
Recommendation

Review proposed source edits as usual, and ensure the symbol/project arguments are correct before relying on the generated file list.

What this means

Installing the skill's recommended tool requires trusting the external Homebrew tap and the swiftfindrefs binary it provides.

Why it was flagged

The documented setup installs a third-party CLI from a GitHub-backed Homebrew tap, while the registry metadata has no install spec or homepage. The install is disclosed and user-directed, but provenance should be checked.

Skill content
brew tap michaelversus/SwiftFindRefs https://github.com/michaelversus/SwiftFindRefs.git
brew install swiftfindrefs
Recommendation

Inspect the GitHub repository/Homebrew formula or pin a trusted version before installing in sensitive development environments.