Ios security

Skill ComeOnOliver/skillshub/skills/HoangNguyen0403/agent-skills-standard/ios-security

Standards for Keychain, Biometrics, and Data Protection. Use when implementing Keychain storage, Face ID/Touch ID, or data protection in iOS. (triggers: **/*.swift, SecItemAdd, kSecClassGenericPassword, LAContext, LocalAuthentication)From its SKILL.md

Install

npx -y skills add ComeOnOliver/skillshub --skill ios-security

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

SKILL.md

1.7 KB, 342 tokens by cl100k_base, as published. Nobody here has run it

iOS Security Standards

Priority: P0 (CRITICAL)

Implementation Guidelines

Key Storage

Keychain: Use for Auth tokens, passwords, and PII. Never store in UserDefaults.
SecItem API: Use SecItemAdd, SecItemUpdate, and SecItemDelete for persistent secure storage. Use kSecClassGenericPassword for tokens.
Biometrics: Use LocalAuthentication for Face ID or Touch ID. Use LAContext and verify availability with canEvaluatePolicy before evaluation.

Data Protection

File Encryption: Use Data.WritingOptions.completeFileProtection when saving files to disk.
App Sandboxing: Respect the sandbox; do not attempt to access files outside of your container.
Sensitive Data: Avoid storing PII in unprotected files.

Network Security

ATS: Don't disable App Transport Security (ATS) globally in Info.plist. In-transport encryption is mandatory.
SSL Pinning: Use ServerTrustManager or TrustKit for backend-critical applications to prevent MITM attacks.

Anti-Patterns

No secrets in UserDefaults: Always use Keychain.
No unhandled LAError: Check for userCancel, authenticationFailed, etc.
No PII/token logging: Ensure sensitive logs are stripped in Release builds.

References

Keychain & Biometrics Implementation

What ships with it

Read from the repository

Just SKILL.md. No reference files, no scripts.