Healthkit Code Review
Automates healthkit backend code reviews, identifying potential errors, inefficiencies, and adherence to best practices.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add healthkit-code-review npx -- -y @trustedskills/healthkit-code-review
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"healthkit-code-review": {
"command": "npx",
"args": [
"-y",
"@trustedskills/healthkit-code-review"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
The healthkit-code-review skill enables AI agents to analyze and critique code specifically for Apple HealthKit integration. It scans implementations for data privacy compliance, permission handling accuracy, and adherence to platform-specific guidelines.
When to use it
- Before submitting code to App Store Review that involves accessing user health data.
- When auditing existing integrations to ensure they request the minimal necessary permissions.
- During development to verify that
HKAuthorizationRequestflows are implemented correctly. - To check for common pitfalls in handling read-only versus write access scopes.
Key capabilities
- Validates HealthKit permission requests against Apple's current guidelines.
- Identifies potential privacy violations in data storage and transmission logic.
- Reviews code structure for proper error handling during authorization failures.
- Checks implementation of required background fetch configurations for health updates.
Example prompts
- "Review this Swift file for HealthKit integration issues before I submit it to the App Store."
- "Analyze these permission request blocks to ensure they follow Apple's privacy best practices."
- "Check if my code correctly handles the transition from read-only to full write access in HealthKit."
Tips & gotchas
Ensure your project targets the latest iOS version, as HealthKit guidelines evolve frequently. This skill focuses on code logic; it cannot verify actual runtime behavior or network connectivity issues.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.