Agent skill · Audited from source

apple-intelligence

skill · rshankras/claude-code-apple-skillsMIT licenceAudited 26 Oct 2026 · source 7fd70e317e5c

★ 830pushed 93 days ago
✓SAFEGrade B · 89/100 · 26 Oct 2026 · 7fd70e3
830repo stars · whole rshankras/claude-code-apple-skills

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 7fd70e317e5c and found no filesystem, network or shell access and no hard-coded secrets. What it does: Apple Intelligence skills for on-device AI features including Foundation Models, Visual Intelligence, App Intents, and intelligent assistants. Use when implementing AI-powered features.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “apple-intelligence (rshankras/claude-code-apple-skills)”. Retrieved 26 Oct 2026. https://modelsatlas.com/skills/rshankras/apple-intelligence

Trust audit

Audit 0.4.1 · source read 26 Oct 2026

Trust score89/100✓SAFE B
0 critical0 high0 medium1 low1 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codeNA0
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS2
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (2)

LOWPrompt injectionprompt.override · foundation-models/safety-and-guardrails.md:44
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
- Apple-trained guardrails apply to **both input and output**: "Your instructions, prompts, and tool calls are all considered inputs... harmful model outputs are blocked, even if the prompts were craf
Why
asks the agent to drop prior instructions or safety
Fix
remove the instruction
INFOPrompt injectionprompt.read_system · foundation-models/safety-and-guardrails.md:44
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
- Apple-trained guardrails apply to **both input and output**: "Your instructions, prompts, and tool calls are all considered inputs... harmful model outputs are blocked, even if the prompts were craf
Why
No further detail recorded for this rule.
Fix
—

Audit 0.4.1 · source sha 7fd70e317e5c · 26 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherrshankras GitHub userOwner of the repository this skill is read from
  • Source folderrshankras/claude-code-apple-skills/skills/apple-intelligenceThe exact folder we audited
  • LicenceMITAs the repository states it
  • Commit pinned for this verdict7fd70e317e5cA new audit runs when the source changes
  • Repository statusNot archivedLast push 93 days ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Apple Intelligence skills for on-device AI features including Foundation Models, Visual Intelligence, App Intents, and intelligent assistants. Use when implementing AI-powered features.

---
name: apple-intelligence
description: Apple Intelligence skills for on-device AI features including Foundation Models, Visual Intelligence, App Intents, and intelligent assistants. Use when implementing AI-powered features.
allowed-tools: [Read, Write, Edit, Glob, Grep, Bash, AskUserQuestion]
last_verified: 2026-07-16
review_by: 2027-06-22
os_version: iOS 27 / macOS 27
---

# Apple Intelligence Skills

Skills for implementing Apple Intelligence features including on-device LLMs, visual recognition, App Intents integration, and intelligent assistants.

## When This Skill Activates

Use this skill when the user:
- Wants to add AI/LLM features to their app
- Needs on-device text generation or understanding
- Asks about Foundation Models or Apple Intelligence
- Wants to implement structured AI output
- Needs prompt engineering guidance
- Wants camera-based visual intelligence features
- Needs Siri, Shortcuts, or Spotlight integration via App Intents
- Wants to expose app actions or content to the system

## Available Skills

### foundation-models/
On-device LLM integration with prompt engineering best practices.
- Model availability checking
- Session management
- @Generable structured output (property-order + schema-injection rules)
- Tool calling patterns
- Snapshot streaming
- Prompt engineering techniques
- `safety-and-guardrails.md` — model limits, the instructions-over-prompts hierarchy, guardrail handling, the four-layer safety stack, evals
- `models-and-agents.md` — Private Cloud Compute, LanguageModel protocol (third-party backends), vision input, DynamicProfile agents, tool-calling modes, KV-cache rules

### visual-intelligence/
Integrate with iOS Visual Intelligence for camera-based search.
- IntentValueQuery implementation
- SemanticContentDescriptor handling
- AppEntity for searchable content
- Display representations
- Deep linking from results

### app-intents/
App Intents for Siri, Shortcuts, Spotlight, and Apple Intelligence.
- AppIntent protocol, parameters, perform()
- AppEntity and entity queries
- App Shortcuts with voice phrases
- IndexedEntity and Spotlight indexing
- Intent modes (background, foreground)
- Interactive snippets with SnippetIntent
- Visual intelligence integration
- Onscreen entities for Siri/ChatGPT
- Multiple choice API
- Swift package support

## Key Principles

### 1. Privacy First
- On-device processing by default; Private Cloud Compute extends capacity without storing prompts (no account/API keys — WWDC26 241)
- When routing to less-private backends, redact context first (see foundation-models/models-and-agents.md)

### 2. Graceful Degradation
- Always check model availability
- Provide fallback UI for unsupported devices
- Handle errors gracefully (incl. guardrail violations — silent for proactive features, explained for user-initiated)

### 3. Efficient Prompting
- Keep prompts focused and specific
- Use structured output when possible
- Respect context window limits — query `model.contextSize`, never hardcode (4,096 first-gen on-device; 8,192 iOS 27 on-device; 32,000 Private Cloud Compute)

## Reference Documentation

- [Foundation Models](https://developer.apple.com/documentation/foundationmodels)
- [Visual Intelligence](https://developer.apple.com/documentation/visualintelligence)
- [App Intents](https://developer.apple.com/documentation/appintents)
- Local captured docs (optional): if `~/Downloads/docs/` contains `FoundationModels-Using-on-device-LLM-in-your-app.md`, `Implementing-Visual-Intelligence-in-iOS.md`, or `AppIntents-Updates.md`, read them for extra detail; skip silently if absent.

Excerpt, first 3,607 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 7fd70e3

Download folder ↗
git clone https://github.com/rshankras/claude-code-apple-skills
git -C claude-code-apple-skills checkout 7fd70e317e5c

The author documents no install command, so this uses the repository directly. Our verdict covers commit 7fd70e317e5c only.

Works in

The author has not said which agents this skill supports, and we have not tested it in any.

Audit history

Every audit, every source change

  1. ✓SAFE B 89 / 100

    first audit · source 7fd70e317e5c

Similar skills

legal✓SAFE

rshankras/claude-code-apple-skills

Legal document generation and compliance guidance for indie Apple developers. Covers privacy policies, terms of service, EULAs, GDPR/CCPA/DPDP compliance, and Apple App Store legal requirements. Use when user needs…

★ 838Grade B
growth✓SAFE

rshankras/claude-code-apple-skills

Growth skills for indie Apple developers — user acquisition, analytics interpretation, press/media outreach, community building, and indie business operations. Also covers the stage-by-stage store-growth audit and the…

★ 837Grade B
design✓SAFE

rshankras/claude-code-apple-skills

Design skills for Apple platform UI — Liquid Glass, animations, game feel (haptics, sound, celebrations), UI prototyping, UX writing, SF Symbols, and typography. Use when implementing design language features, adding…

★ 836Grade B
core-ml✓SAFE

rshankras/claude-code-apple-skills

Core ML, Create ML, Vision framework, Natural Language framework, on-device ML integration. Use when user wants image classification, text analysis, object detection, sound classification, model optimization, or custom…

★ 834Grade B
App Description Writer✓SAFE

rshankras/claude-code-apple-skills

Generate compelling App Store descriptions that convert browsers into users. Use when writing initial descriptions, improving existing copy, or drafting promotional text and What's New for a major update.

★ 810Grade B
App Store✓SAFE

rshankras/claude-code-apple-skills

App Store optimization and marketing skills for descriptions, screenshots, keywords, review responses, and comprehensive promotional strategy. Use when user needs help with App Store presence, ASO, marketing, or…

★ 810Grade B

Questions about apple-intelligence

What does the apple-intelligence skill do?
Claude Code skills for Apple platform development (iOS, macOS, iPadOS) — product validation, code generation, App Store optimization, and more
Is apple-intelligence safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can apple-intelligence access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (7fd70e317e5c), read on 2026-10-26. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.