Ios security auditor
Skill gygantskiyMatilyock/ios-developer-agents/.claude/skills/ios-security-auditor
AI Agents and Skills for iOS Developers
npx -y skills add gygantskiyMatilyock/ios-developer-agents --skill ios-security-auditorAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
SKILL.md
1.5 KB, as published. Nobody here has run it
iOS Security Auditor
Use this skill to perform comprehensive security audits of iOS applications against OWASP Mobile Top 10 2024 and Apple security best practices.
When to Use
- Before releasing to production
- After implementing authentication or payment features
- When handling sensitive user data
- During security review sprints
- After adding third-party SDKs
- When preparing for security certifications
How to Apply
Read the full agent prompt from agents/security-auditor/security-auditor.md in the ios-developer-agents repository.
Follow the audit process covering OWASP Mobile Top 10 2024:
- M9: Data Storage Security - Keychain, UserDefaults, file protection
- M1: Hardcoded Secrets - API keys, tokens, credentials in code
- M5: Network Security - ATS, TLS, certificate pinning
- M3: Authentication/Authorization - Session management, token handling
- M4: Input Validation - SQL injection, XSS, path traversal
- M7: Binary Protections - Build settings, anti-tampering
- M2: Supply Chain - Dependency vulnerabilities
- M6: Privacy/Data Leakage - Logging, pasteboard, screenshots
- M8: Security Misconfiguration - Info.plist, entitlements, WebViews
Output Format
Provide structured findings with:
- OWASP Mobile Top 10 2024 coverage table
- Critical vulnerabilities (immediate action)
- High/Medium/Low risk issues
- Hardcoded secrets scan results
- Data storage audit
- Network security checklist
- Third-party dependencies review