Mobile Reverse
sickn33/agentic-awesome-skills
Authorized Android/iOS application reverse engineering and security testing: APK/IPA analysis, runtime instrumentation (Frida/Objection), SSL-pinning and jailbreak/root-detection bypass, per OWASP…
Agent skill
Performing iOS App Security Assessment
Performs comprehensive iOS application security assessments using Frida for dynamic instrumentation, Objection for runtime exploration, SSL pinning bypass for traffic interception, keychain…
Install Performing iOS App Security Assessment
$ npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-ios-app-security-assessment -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install mukul975/Anthropic-Cybersecurity-Skills performing-ios-app-security-assessment --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/performing-ios-app-security-assessment .claude/skills/performing-ios-app-security-assessment && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "performing-ios-app-security-assessment" agent skill from https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/main/skills/performing-ios-app-security-assessment into .claude/skills/performing-ios-app-security-assessment/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "performing-ios-app-security-assessment", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/main/skills/performing-ios-app-security-assessmentType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-ios-app-security-assessment -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install mukul975/Anthropic-Cybersecurity-Skills performing-ios-app-security-assessment --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/performing-ios-app-security-assessment .agents/skills/performing-ios-app-security-assessment && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "performing-ios-app-security-assessment" agent skill from https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/main/skills/performing-ios-app-security-assessment into .agents/skills/performing-ios-app-security-assessment/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "performing-ios-app-security-assessment", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-ios-app-security-assessment -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install mukul975/Anthropic-Cybersecurity-Skills performing-ios-app-security-assessment --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/performing-ios-app-security-assessment .cursor/skills/performing-ios-app-security-assessment && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "performing-ios-app-security-assessment" agent skill from https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/main/skills/performing-ios-app-security-assessment into .cursor/skills/performing-ios-app-security-assessment/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "performing-ios-app-security-assessment", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/performing-ios-app-security-assessment--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-ios-app-security-assessment -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install mukul975/Anthropic-Cybersecurity-Skills performing-ios-app-security-assessment --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/performing-ios-app-security-assessment .gemini/skills/performing-ios-app-security-assessment && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "performing-ios-app-security-assessment" agent skill from https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/main/skills/performing-ios-app-security-assessment into .gemini/skills/performing-ios-app-security-assessment/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "performing-ios-app-security-assessment", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install mukul975/Anthropic-Cybersecurity-Skills performing-ios-app-security-assessmentInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-ios-app-security-assessment -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/performing-ios-app-security-assessment .github/skills/performing-ios-app-security-assessment && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "performing-ios-app-security-assessment" agent skill from https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/main/skills/performing-ios-app-security-assessment into .github/skills/performing-ios-app-security-assessment/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "performing-ios-app-security-assessment", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-ios-app-security-assessment -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install mukul975/Anthropic-Cybersecurity-Skills performing-ios-app-security-assessment --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/performing-ios-app-security-assessment .opencode/skills/performing-ios-app-security-assessment && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "performing-ios-app-security-assessment" agent skill from https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/main/skills/performing-ios-app-security-assessment into .opencode/skills/performing-ios-app-security-assessment/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "performing-ios-app-security-assessment", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
performing-ios-app-security-assessment- GitHub stars
- 34k
- Token cost
- ~3k tokens
- SKILL.md length
- 751 words
- Files
- 4 (incl. scripts, references)
- Skills in repo
- 644
- Repo updated
- First seen
- Licence
- Apache-2.0
At a glance
Performs comprehensive iOS application security assessments using Frida for dynamic instrumentation, Objection for runtime exploration, SSL pinning bypass for traffic interception, keychain…
- Works in 7 steps: IPA Static Analysis → Environment Setup and Frida Attachment → SSL Pinning Bypass → …
- Conducting authorized iOS penetration tests
- SKILL.md covers Disclaimer, When to Use, Prerequisites and Workflow, plus 4 more sections
- Runs Python scripts from its folder; calls pip
What it does
Performing iOS App Security Assessment is an agent skill from mukul975/Anthropic-Cybersecurity-Skills. Performs comprehensive iOS application security assessments using Frida for dynamic instrumentation, Objection for runtime exploration, SSL pinning bypass for traffic interception, keychain extraction for credential analysis, and IPA static analysis for binary-level review. Use when conducting authorized iOS penetration tests, evaluating mobile app security posture against OWASP MASTG, or assessing iOS app data protection and transport security controls. Activates for requests involving iOS app pentesting…
Its SKILL.md is about 3k tokens, which your agent loads only when the skill is triggered. The skill folder holds 5 other files, including scripts and reference files (for example `references/api-reference.md` and `scripts/agent.py`).
It sits in Security, covering iOS development, Mobile application security and Security review. It works with iOS and Frida. The repository describes itself as: 817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io…. The licence is Apache-2.0.
When your agent uses it
- Conducting authorized iOS penetration tests
- Evaluating mobile app security posture against OWASP MASTG
- Assessing iOS app data protection and transport security controls
Example prompts
- “Use the performing-ios-app-security-assessment skill to perform comprehensive iOS application security assessments using Frida for dynamic…”
- “/performing-ios-app-security-assessment”
Requirements
- Python 3
Workflow steps
7 steps, taken from the step headings in SKILL.md.
What it can do on your machine
Read from SKILL.md and the folder at commit 54a7988. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Ships 1 file in scripts/ (Python), which the agent can run.
Shell commands in SKILL.md call:
pip
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md. Its commands use pip, which can reach the network depending on how they are called.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Performing iOS App Security Assessment loads about 3k tokens when it runs, and up to ~4k if it reads all its reference files. Until then it costs about 161 tokens; SKILL.md has 751 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.
SKILL.md
The full file from mukul975/Anthropic-Cybersecurity-Skills at commit 54a7988, republished under its Apache-2.0 licence (© mukul975). 751 words, ~2,962 tokens.
Download SKILL.mdSave it as
.claude/skills/performing-ios-app-security-assessment/SKILL.md (or your agent's skills folder). This skill also uses 3 other files; get the full folder from GitHub.- name
- performing-ios-app-security-assessment
- description
- Performs comprehensive iOS application security assessments using Frida for dynamic instrumentation, Objection for runtime exploration, SSL pinning bypass for traffic interception, keychain extraction for credential analysis, and IPA static analysis for binary-level review. Use when conducting authorized iOS penetration tests, evaluating mobile app security posture against OWASP MASTG, or assessing iOS app data protection and transport security controls. Activates for requests involving iOS app pentesting, Frida-based iOS instrumentation, mobile app SSL pinning bypass, or IPA reverse engineering.
- domain
- cybersecurity
- subdomain
- mobile-security
- author
- mukul975
- tags
- mobile-security, ios, frida, objection, ssl-pinning, keychain, ipa-analysis, owasp-mastg
- version
- 1.0.0
- license
- Apache-2.0
- nist_csf
- PR.PS-01, PR.AA-05, ID.RA-01, DE.CM-09
- mitre_attack
- T1059, T1056, T1036, T1078, T1003
Performing iOS App Security Assessment
Disclaimer
This skill is intended for authorized security testing, penetration testing engagements, CTF competitions, and educational purposes only. Unauthorized access to applications or devices is illegal. Always obtain written authorization before performing any security assessment. Misuse of these techniques may violate computer fraud and abuse laws in your jurisdiction.
When to Use
Use this skill when:
- Conducting authorized penetration tests of iOS applications against OWASP MASVS/MASTG criteria
- Performing dynamic analysis of iOS apps using Frida instrumentation and Objection runtime exploration
- Bypassing SSL/TLS certificate pinning to intercept and analyze app network traffic through a proxy
- Extracting and auditing iOS Keychain contents for insecure credential storage practices
- Performing static analysis of IPA packages to identify hardcoded secrets, entitlements, and binary protections
- Assessing jailbreak detection and anti-tampering controls in iOS applications
Do not use against applications without explicit written authorization. Do not use on production devices containing real user data unless the engagement scope permits it.
Prerequisites
- Python 3.10+ with pip
- Frida toolkit:
pip install frida-tools frida - Objection:
pip install objection - Target iOS device (jailbroken with frida-server, or non-jailbroken with patched IPA)
- macOS with Xcode command-line tools (recommended for code signing and ideviceinstaller)
- Burp Suite or mitmproxy for traffic interception after SSL pinning bypass
- For jailbroken devices: SSH access and frida-server running on the device
- For non-jailbroken devices: Apple Developer certificate for IPA re-signing
Workflow
Step 1: IPA Static Analysis
Extract and analyze the IPA binary before runtime testing:
# Unzip IPA for static analysis
unzip target.ipa -d target_app/
# Check binary architectures and protections
otool -hv target_app/Payload/*.app/AppExecutable
otool -l target_app/Payload/*.app/AppExecutable | grep -A4 LC_ENCRYPTION
# Extract Info.plist for entitlements and URL schemes
plutil -p target_app/Payload/*.app/Info.plist
# Search for hardcoded secrets in binary strings
strings target_app/Payload/*.app/AppExecutable | grep -iE "api[_-]?key|secret|password|token|firebase"
# Check embedded provisioning profile
security cms -D -i target_app/Payload/*.app/embedded.mobileprovision
# Identify linked frameworks
otool -L target_app/Payload/*.app/AppExecutableStep 2: Environment Setup and Frida Attachment
# For jailbroken device: verify Frida server is running
frida-ps -U
# Spawn target app with Frida
frida -U -f com.target.app --no-pause
# For non-jailbroken device: patch IPA with Frida Gadget
objection patchipa --source target.ipa --codesign-signature "Apple Development: tester@example.com"
# Install patched IPA
ideviceinstaller -i target-patched.ipa
# Attach Objection to running app
objection --gadget "com.target.app" exploreStep 3: SSL Pinning Bypass
Bypass certificate pinning to enable traffic interception:
# Using Objection's built-in bypass
objection --gadget "com.target.app" explore --startup-command "ios sslpinning disable"
# Using Frida script for more comprehensive bypass
frida -U -f com.target.app -l ssl_pinning_bypass.js --no-pause
# Verify bypass by configuring device proxy to Burp Suite
# Device Settings -> Wi-Fi -> HTTP Proxy -> Manual -> <burp_ip>:8080
# Install Burp CA certificate on device via http://<burp_ip>:8080/certThe Frida SSL pinning bypass script hooks into NSURLSession, NSURLConnection, and AFNetworking/Alamofire trust evaluation delegates to override certificate validation at the TLS handshake level.
Step 4: Keychain Extraction and Credential Analysis
# Dump all accessible keychain items via Objection
ios keychain dump
# Dump keychain with raw data output
ios keychain dump --json
# Check keychain item accessibility attributes
# Items with kSecAttrAccessibleAlways or kSecAttrAccessibleAfterFirstUnlock
# are accessible without device unlock - this is a finding
# Search for specific credential types
ios keychain dump | grep -i "password\|token\|secret\|oauth"
# Inspect NSUserDefaults for sensitive data leaks
ios nsuserdefaults get
# Check for sensitive data in app cookies
ios cookies getStep 5: Runtime Method Hooking and Analysis
# List all loaded classes
ios hooking list classes
# Search for security-relevant classes
ios hooking search classes Auth
ios hooking search classes Crypto
ios hooking search classes Biometric
ios hooking search classes Jailbreak
# Hook authentication methods to observe parameters and return values
ios hooking watch method "+[AuthManager validateCredentials:password:]" --dump-args --dump-return
# Monitor biometric authentication (LocalAuthentication framework)
ios hooking watch class LAContext
# Bypass jailbreak detection
ios jailbreak disable
# Search memory for sensitive strings
memory search "Bearer " --string
memory search "password" --string
# Dump loaded modules for third-party library identification
memory list modulesStep 6: Data Storage Assessment
# List files in app sandbox
env
# Check for SQLite databases with sensitive data
sqlite connect Documents/app.db
sqlite execute query "SELECT name FROM sqlite_master WHERE type='table'"
# Inspect plist files for cached credentials
ios plist cat Library/Preferences/com.target.app.plist
# Check for sensitive data in app caches
find Library/Caches/ -type f
# Monitor pasteboard for credential leakage
ios pasteboard monitor
# Check binary cookies
ios cookies getStep 7: Network and Transport Security Assessment
After SSL pinning bypass, analyze intercepted traffic:
# Verify App Transport Security (ATS) configuration in Info.plist
# Check for NSAllowsArbitraryLoads = true (disables ATS)
ios plist cat Info.plist | grep -A5 NSAppTransportSecurity
# Hook URL session delegates to monitor all network calls
ios hooking watch class NSURLSession
ios hooking watch class NSURLSessionConfiguration
# Check for certificate transparency validation
ios hooking search classes CT
ios hooking search classes CertificateKey Concepts
| Term | Definition |
|---|---|
| Frida | Dynamic instrumentation toolkit that injects a JavaScript engine into target processes, enabling runtime hooking, tracing, and modification of iOS app behavior |
| Objection | Runtime mobile exploration toolkit built on Frida providing pre-built commands for common security tests including keychain dump, SSL pinning bypass, and method hooking |
| SSL Pinning | Client-side certificate validation that restricts which TLS certificates the app trusts, preventing proxy-based traffic interception; bypassed by hooking trust evaluation functions |
| Keychain | iOS secure storage API for credentials and tokens; items have accessibility attributes that control when they can be read (e.g., only when device is unlocked) |
| IPA | iOS App Store Package; a ZIP archive containing the app binary, frameworks, assets, and provisioning profile that can be extracted for static analysis |
| OWASP MASTG | Mobile Application Security Testing Guide; comprehensive methodology for iOS and Android security testing organized by MASVS verification categories |
| Frida Gadget | Shared library (.dylib) injected into IPA for non-jailbroken testing; enables Frida instrumentation without requiring a jailbroken device |
| Method Swizzling | Objective-C runtime technique that exchanges method implementations at runtime; used by Frida to intercept and modify method behavior |
Show full SKILL.md (252 more words)Show less
Tools & Systems
- Frida: Dynamic instrumentation framework for injecting JavaScript into native app processes at runtime
- Objection: High-level Frida-powered mobile security toolkit with pre-built exploration commands
- frida-tools: CLI utilities including frida-ps (process listing), frida-trace (method tracing), frida-discover (API discovery)
- Burp Suite: HTTP/HTTPS interception proxy used to analyze app traffic after SSL pinning bypass
- ideviceinstaller: Cross-platform CLI tool for installing and managing iOS apps over USB
- otool / rabin2: Binary analysis tools for inspecting Mach-O headers, linked libraries, and encryption info
- Cycript / Frida REPL: Interactive consoles for exploring Objective-C runtime and modifying objects in memory
Common Pitfalls
- Frida detection crashes the app: Some apps implement Frida detection by scanning for frida-server process names, Frida's RPC ports, or gadget signatures. Use
--startup-commandto hook detection checks before they execute, or rename frida-server binary. - Keychain scope limitation: Objection can only access keychain items within the app's keychain access group. System-wide keychain items require jailbreak-level tools like keychain-dumper.
- Swift name mangling: Swift method names are mangled in the Objective-C runtime. Use
ios hooking list classesand grep for demangled names, or use frida-trace with wildcard patterns. - App Transport Security enforcement: ATS may block your proxy connections even after SSL pinning bypass. Verify the Info.plist ATS configuration allows your proxy's certificate chain.
- Code signing invalidation: Patching an IPA with Frida Gadget invalidates the original code signature. You need a valid Apple Developer certificate to re-sign the patched IPA.
- Non-persistent modifications: All Frida/Objection hooks are runtime-only and reset when the app restarts. Document findings and capture evidence immediately.
Output Format
## Finding: Insecure Keychain Storage with kSecAttrAccessibleAlways
**ID**: IOS-001
**Severity**: High (CVSS 7.5)
**OWASP MASTG**: MASTG-TEST-0055 (Testing Data Storage)
**MASVS Category**: MASVS-STORAGE
**Description**:
The application stores OAuth refresh tokens in the iOS Keychain with
the accessibility attribute kSecAttrAccessibleAlways, making them
readable even when the device is locked or after a reboot without
user authentication.
**Proof of Concept**:
1. Attach Objection to com.target.app: objection --gadget com.target.app explore
2. Execute: ios keychain dump
3. Observe refresh_token item with Accessible: kSecAttrAccessibleAlways
4. Token value is accessible without device unlock
**Impact**:
An attacker with physical access to a locked device or forensic
image can extract OAuth refresh tokens and gain persistent access
to the user's account without knowing device passcode.
**Remediation**:
Store sensitive credentials with kSecAttrAccessibleWhenUnlockedThisDeviceOnly
and enable biometric protection via kSecAccessControlBiometryCurrentSet.© mukul975, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
SKILL.md and 3 other files (scripts, references) in skills/performing-ios-app-security-assessment of mukul975/Anthropic-Cybersecurity-Skills.
- SKILL.md
- LICENSE
- references/api-reference.md
- scripts/agent.py
Open the folder on GitHubat commit 54a7988
Compare with similar skills
Performing iOS App Security Assessment next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Performing iOS App Security Assessment this skillmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~3k | Automated safety check: Pass | Apache-2.0 | |
| Mobile Reversesickn33/agentic-awesome-skills | 47k | 1 repos | ~1.5k | Automated safety check: Pass | MIT | |
| Security ReviewerAratKruglik/claude-laravel | 155 | 1 repos | ~1.1k | Automated safety check: Notes | None | |
| Offensive MobileSnailSploit/Claude-Red | 7.4k | — | ~3.5k | Automated safety check: Pass | MIT | |
| Mobile Securitytransilienceai/communitytools | 563 | — | ~2.5k | Automated safety check: Pass | MIT | |
| Analyzing iOS Binariestrilwu/secskills | 157 | — | ~2k | Automated safety check: Pass | MIT |
Similar skills
Security Reviewer
AratKruglik/claude-laravel
A skill your agent uses when conducting security audits, reviewing code for vulnerabilities, or analyzing infrastructure security.
Offensive Mobile
SnailSploit/Claude-Red
Mobile (Android + iOS) application penetration testing methodology.
Mobile Security
transilienceai/communitytools
Mobile application security testing (Android + iOS) mapped to OWASP MASVS/MASTG — static reversing (Flutter AOT, Unity IL2CPP, React Native/Hermes, native ARM64, Mach-O/Swift), SAST (manifest/IPC…
Analyzing iOS Binaries
trilwu/secskills
Analyze iOS applications at the binary level — decrypting FairPlay-protected IPAs with frida-ios-dump or bagbak, inspecting Mach-O load commands, recovering Objective-C headers with class-dump, and…
Code Audit
3stoneBrother/code-audit
Professional code security audit skill covering 55+ vulnerability types.
More from mukul975/Anthropic-Cybersecurity-Skills
All 644 skills in this repoCampaign Attribution Evidence Analysis
mukul975/Anthropic-Cybersecurity-Skills
Weighs infrastructure, TTP, malware code and timing evidence with the Diamond Model and competing hypotheses to reach a confidence-rated attribution.
Go Malware Analysis in Ghidra
mukul975/Anthropic-Cybersecurity-Skills
Walks through reverse engineering Go-compiled malware in Ghidra: parsing buildinfo and pclntab, recovering stripped function names and extracting dependencies.
LNK and Jump List Forensics
mukul975/Anthropic-Cybersecurity-Skills
Guides forensic analysis of Windows LNK shortcut files and Jump Lists with LECmd, JLECmd and manual parsing to show file access and program execution.
Malware Persistence Analysis with Autoruns
mukul975/Anthropic-Cybersecurity-Skills
Hunts Windows malware persistence with Sysinternals Autoruns, covering run keys, services, scheduled tasks and drivers, with baseline comparison.
NTFS MFT Deleted File Recovery
mukul975/Anthropic-Cybersecurity-Skills
Guides a Windows forensic examination of the NTFS Master File Table to recover deleted-file evidence, build timelines and spot timestomping.
Network Covert Channel Analysis
mukul975/Anthropic-Cybersecurity-Skills
Detects DNS tunneling, ICMP exfiltration and HTTP-based covert channels in packet captures and DNS logs when hunting for hidden command-and-control traffic.
Related
Categories
Questions about Performing iOS App Security Assessment
What does Performing iOS App Security Assessment do?
Performs comprehensive iOS application security assessments using Frida for dynamic instrumentation, Objection for runtime exploration, SSL pinning bypass for traffic interception, keychain…. Performing iOS App Security Assessment is an agent skill from mukul975/Anthropic-Cybersecurity-Skills. Performs comprehensive iOS application security assessments using Frida for dynamic instrumentation, Objection for runtime exploration, SSL pinning bypass for traffic interception, keychain extraction for credential analysis, and IPA static analysis for binary-level review.
When should I use Performing iOS App Security Assessment?
Performing iOS App Security Assessment fits situations like: conducting authorized iOS penetration tests; evaluating mobile app security posture against OWASP MASTG; assessing iOS app data protection and transport security controls.
How do I install Performing iOS App Security Assessment in Claude Code?
Run `npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-ios-app-security-assessment -a claude-code`. Or copy the skill folder (skills/performing-ios-app-security-assessment in mukul975/Anthropic-Cybersecurity-Skills) into .claude/skills/performing-ios-app-security-assessment in your project. Claude Code loads it when a task matches its description.
How do I install Performing iOS App Security Assessment in Codex?
Run `npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-ios-app-security-assessment -a codex`. Or copy the skill folder (skills/performing-ios-app-security-assessment in mukul975/Anthropic-Cybersecurity-Skills) into .agents/skills/performing-ios-app-security-assessment in your project. Codex loads it when a task matches its description.
Can I use Performing iOS App Security Assessment in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-ios-app-security-assessment -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/performing-ios-app-security-assessment, .gemini/skills/performing-ios-app-security-assessment, .github/skills/performing-ios-app-security-assessment and .opencode/skills/performing-ios-app-security-assessment in your project.
What does Performing iOS App Security Assessment need to run?
Going by SKILL.md and its folder, Performing iOS App Security Assessment needs Python for the scripts in its folder and the command-line tools its instructions call (pip). Our summary lists: Python 3.
Does Performing iOS App Security Assessment access the network?
SKILL.md contains no URLs. Its commands use pip, which can reach the network depending on how they are called. This is read from the text; nothing was executed.
Is Performing iOS App Security Assessment safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.
What licence does Performing iOS App Security Assessment use?
Performing iOS App Security Assessment is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Performing iOS App Security Assessment use?
About 3k tokens (SKILL.md is roughly 12k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 1.1k tokens, read only when the agent opens those files.
What are the alternatives to Performing iOS App Security Assessment?
Skills that share tags, products or a category with Performing iOS App Security Assessment: Mobile Reverse (sickn33/agentic-awesome-skills, 47k stars), Security Reviewer (AratKruglik/claude-laravel, 155 stars), Offensive Mobile (SnailSploit/Claude-Red, 7.4k stars) and Mobile Security (transilienceai/communitytools, 563 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Performing iOS App Security Assessment?
mukul975 (a GitHub user) maintains it in mukul975/Anthropic-Cybersecurity-Skills, which has 34,116 GitHub stars. The repository holds 644 skills in this directory. The repository was last updated on August 31, 2026.
Source: mukul975/Anthropic-Cybersecurity-Skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.