Agent skill · Audited from source
axiom-ai
skill · charleswiltgen/axiomMIT licenceAudited 21 Oct 2026 · source 59e2d18fd914
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 59e2d18fd914 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Use when implementing, testing, or evaluating ANY Apple Intelligence, on-device AI, or speech-to-text feature. Covers Foundation Models, @Generable, LanguageModelSession, Tool protocol, eval suites, model-as-judge…
Cite
Cite this page
ModelsAtlas. “axiom-ai (charleswiltgen/axiom)”. Retrieved 21 Oct 2026. https://modelsatlas.com/skills/charleswiltgen/axiom-ai
Trust audit
Audit 0.4.1 · source read 21 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 1 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (1)
INFOPrompt injectionprompt.read_system · skills/foundation-models-guardrails.md:106
| "Permissive mode disables guardrails" | It relaxes layer 2 for string transformations only. Input/output guardrails for guided generation, your instructions, prompt hygiene, and use-case mitigations
- Why
- No further detail recorded for this rule.
- Fix
- —
Audit 0.4.1 · source sha 59e2d18fd914 · 21 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publishercharleswiltgen GitHub userOwner of the repository this skill is read from
- Source foldercharleswiltgen/axiom/axiom-codex/skills/axiom-aiThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict59e2d18fd914A new audit runs when the source changes
- Repository statusNot archivedPushed today
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Use when implementing, testing, or evaluating ANY Apple Intelligence, on-device AI, or speech-to-text feature. Covers Foundation Models, @Generable, LanguageModelSession, Tool protocol, eval suites, model-as-judge…
--- name: axiom-ai description: Use when implementing, testing, or evaluating ANY Apple Intelligence, on-device AI, or speech-to-text feature. Covers Foundation Models, @Generable, LanguageModelSession, Tool protocol, eval suites, model-as-judge scoring, SpeechTranscriber, CoreML. license: MIT --- # Apple Intelligence & AI **You MUST use this skill for ANY Apple Intelligence or Foundation Models work.** <!-- AXIOM_AUDITOR_INLINE_BEGIN — rewritten for Codex by scripts/build-codex.ts; do not hand-edit --> > **Auditors are skills here.** Where this router says "Launch `some-auditor` agent", invoke the > matching Codex skill instead — same procedure, no Claude Code agent required. > > Available: `axiom-audit-foundation-models`. > > The ones that shell out — builds, tests, simulators, crash symbolication — need shell access to run. <!-- AXIOM_AUDITOR_INLINE_END --> ## When to Use Use this router when: - Implementing Apple Intelligence features - Using Foundation Models - Working with LanguageModelSession - Generating structured output with @Generable - Debugging AI generation issues - iOS 26 on-device AI ## AI Approach Triage **First, determine which kind of AI the developer needs:** | Developer Intent | Route To | |-----------------|----------| | On-device text generation (Apple Intelligence) | **Stay here** → Foundation Models skills | | Custom ML model deployment (PyTorch, TensorFlow) — classic Core ML | **See skills/ios-ml.md** (hub) → conversion / compression / training / deployment / ref / diag files | | Core ML model fails to load, is slow, grows memory, or loses accuracy after compression | **See skills/coreml-diag.md** | | Custom **LLM-scale / transformer** model on-device (27-cycle) | **See skills/core-ai.md** → Core AI conversion, runtime, specialization | | Computer vision (image analysis, OCR, segmentation) | **/skill axiom-vision** → Vision framework | | Cloud API integration (OpenAI, generic HTTP) | **/skill axiom-networking** → URLSession patterns | | Cloud Claude integration (Anthropic SDK, Messages API, Claude Agent SDK) | **See `claude-api` skill** (external) → includes automated Opus 4.6 → 4.7 migration | | Speech-to-text / transcription (SpeechAnalyzer, SpeechTranscriber, DictationTranscriber, mic → transcript) | **See skills/speech.md** (`OS27` input providers, Swift 6 mic-tap isolation, the ~2-analyzer cap on iOS/visionOS; none on macOS) | | Turnkey Apple Intelligence UI — suggested actions for a messaging conversation (`OS27`) | **See skills/suggested-actions.md** → drop-in `SuggestedActionsView`, entitlement-gated | | System AI features (Writing Tools, Genmoji) | No custom code needed — these are system-provided | **Key boundary: Foundation Models vs ML (custom models)** - Foundation Models = Apple's on-device LLM framework (LanguageModelSession, @Generable) - ML = Custom model deployment (CoreML conversion, quantization, MLTensor) and speech-to-text - If developer says "run my own model" → skills/ios-ml.md. If "use Apple Intelligence" → stay here. ## Training Path Boundaries When developers say "I need to train / fine-tune / personalize a model," four distinct paths exist. They are often conflated; each has different output, lifecycle, and runtime compatibility. | Path | Trains | Output | Lifecycle | Routes to | |------|--------|--------|-----------|-----------| | **FM custom adapter** (26-cycle only — runtime obsoleted in 27.0) | Apple's frozen on-device 3B LLM (rank-32 LoRA) | `.fmadapter` package, ~160 MB | Build-time per OS version, delivered via Background Assets | `skills/foundation-models-adapters.md` (discipline) + `skills/foundation-models-adapters-ref.md` (toolkit + runtime) + `skills/foundation-models-adapters-diag.md` (failure modes); delivery via `axiom-integration (skills/background-assets.md)` | | **Core ML `MLUpdateTask`** | Your NN-spec model's fully-connected and convolutional layers | Updated `.mlmodelc` saved to disk | Runtime, per-user (on-device personalization) | `skills/coreml-training.md` | | **Create ML** | A new Core ML model from scratch / transfer learning | `.mlmodel` | Build-time, on Mac or iOS (per type) | `skills/coreml-training.md` | | **MLX LM** (`mlx_lm.lora`) | Open-source LLMs on Apple Silicon | `adapters/adapters.safetensors` — NOT loadable by Foundation Models | Build-time; not an iOS distribution path | External — outside Axiom scope; treat as adjacent research tool | | **Server LLM fine-tune** | Cloud-hosted model (e.g., vendor fine-tunes) | Cloud artifact, accessed via API | Build-time; runs in cloud | `/skill axiom-networking` for the API integration; the fine-tune workflow is the vendor's domain | **Critical distinctions**: - MLX LM output (`.safetensors`) cannot be loaded into a `LanguageModelSession`. Different toolchain, different deployment target. - `MLUpdateTask` is **NN-spec only** — does not support ML Program (`.mlpackage`) models from modern PyTorch / TensorFlow conversion. This is the main reason it's rarely used in new projects. - FM custom adapters are pinned per-base-model version (per-OS). One adapter does NOT serve every device in your install base — see the Approach Triage section in `skills/foundation-models.md` for the deflection ladder. For the full "which path applies to me?" disambiguation (decision tree, the three week-costing mistakes, per-path routing) → `skills/training-paths.md`. ## Cross-Domain Routing **Foundation Models + concurrency** (UI freezes during generation, concurrent-request errors): - Awaiting a session suspends rather than blocks — a freeze is synchronous main-actor work around generation (foundation-models-diag Pattern 5a), and `concurrentRequests` means a second request started while `isResponding` was true - **Fix here first** using foundation-models (one request at a time) and foundation-models-diag Pattern 5a (freezes) - If concurrency issue is broader than Foundation Models → **also invoke axiom-concurrency** **Foundation Models + data** (@Generable decoding
Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 59e2d18
pip install -r requirements.txt
git clone https://github.com/charleswiltgen/axiom git -C axiom checkout 59e2d18fd914
Commands as the repository documents them: shown, never run by us. Our verdict covers commit 59e2d18fd914 only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Claude Code | Mentioned in its text, not tested | Skills for Claude Code · About Claude Code |
| Codex | Mentioned in its text, not tested | Skills for Codex · About Codex |
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
59e2d18fd914
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/charleswiltgen/axiom-ai/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
obra/superpowers
Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions…
obra/superpowers
Use when you have a spec or requirements for a multi-step task, before touching code
obra/superpowers
Use when starting any conversation - establishes how to find and use skills, requiring skill invocation before ANY response including clarifying questions
Add this badge to your README
[](https://modelsatlas.com/skills/charleswiltgen/axiom-ai/)
<a href="https://modelsatlas.com/skills/charleswiltgen/axiom-ai/"><img src="https://modelsatlas.com/skills/charleswiltgen/axiom-ai/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about axiom-ai
What does the axiom-ai skill do?
Is axiom-ai safe to install?
What can axiom-ai access on my machine?
Which assistants does axiom-ai work with?
How current is this page?
Sources
- github.com/charleswiltgen/axiom/tree/main/axiom-codex/skills/axi — the audited source at commit 59e2d18fd914 and every finding aboveObserved · 21 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the axiom-ai skill do?
- Is axiom-ai safe to install?
- What can axiom-ai access on my machine?