Security

This is a systematic security auditor for Apple platform apps. It greps your codebase for common vulnerabilities like plaintext credentials, disabled SSL validation, and hardcoded secrets, then works through secure storage, biometric auth, network security, and platform-specific patterns. You get a structured report with severity ratings (critical through low) and side-by-side vulnerable versus secure code. The quick checks alone are worth it: automated searches for things like passwords in UserDefaults or secrets in print statements. It won't catch everything a manual pentest would, but it's a solid first pass that follows OWASP categories and Apple's security docs. Best used before submitting to App Store or after adding any authentication flow.

skills.sh installs: 502
GitHub stars: 879
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add rshankras/claude-code-apple-skills --skill security --agent claude-code

Installs into .claude/skills of the current project.

Files

Security (category index)

General security guidance (Keychain patterns, biometric auth, certificate pinning, ATS) was removed from this library after the 2026-07 blind-test audit confirmed current models answer it correctly without a skill (tools/skill-audit/, Fable-verified coverage 0.86). What remains here is the material models get wrong or can't know.

Available Skills

privacy-manifests/

Privacy manifest audit — PrivacyInfo.xcprivacy format, required-reason APIs, App Tracking Transparency declarations, and App Store submission requirements.

SKILL.md on GitHub

Sponsors

Promote your product hereReach 125k+ visitors monthly Promote your product hereReach 125k+ visitors monthly