skills.rest
ChiChouChiChouCommunity·2 Agent Skills Included

grapefruit

Runtime mobile app security testing and instrumentation for iOS and Android

Inspects, hooks, and modifies running iOS and Android apps through a web interface and CLI powered by Frida. Captures network traffic, crypto operations, filesystem data, and privacy API usage without manual reverse engineering. Runs autonomous OWASP MASTG security audits and exports structured findings reports with real evidence.
1,369|109
↗
npx skills add ChiChou/grapefruit --all -g -y
Available:

Tells the AI agent how the monorepo is structured, how to install and route requests to the igf and audit skills, and what build and check commands to run before making changes.

All Skills in This Repository (2)

Pure Emerald Level Indicators
📦 In Repo
ChiChouChiChou

igf

Enumerate Frida devices and control Grapefruit IGF server hooks via CLI.

Community
Advanced
📦 In Repo
ChiChouChiChou

mastg

Audit mobile app security against OWASP MASTG v2 using igf dynamic instrumentation.

Community
Advanced

Frequently Asked Questions

FAQPage Schema
How to install Grapefruit?▼

Run `npx skills add ChiChou/grapefruit --all -g -y` in your terminal to install all skills in this suite globally.

What does Grapefruit do for mobile security testing?▼

It lets you hook, inspect, and modify running iOS and Android apps in real time, capturing network traffic, crypto calls, files, and sensitive API usage through a browser-based UI.

Can AI run an OWASP MASTG audit automatically?▼

Yes. The included audit skill walks through the full OWASP MASTG v2 checklist, collects runtime evidence, and generates a structured markdown report with severity ratings.

Does Grapefruit work with Claude Code and other AI agents?▼

Yes. The skills follow the universal SKILL.md standard and work in Claude Code, Cursor, and other compatible agents via the igf CLI.

Do I need a jailbroken or rooted device to use Grapefruit?▼

You need a device with the Frida server running, which typically means a jailbroken iOS device, rooted Android device, or an emulator. Grapefruit itself does not include detection bypasses.

Related Repositories in Software Engineering

View All in Software Engineering→
openclawopenclaw
388.4k

openclaw

Run a personal AI assistant across your devices and chat apps

Official📦 120 Skills
obraobra
280.0k

superpowers

Gives coding agents a disciplined workflow from idea to merged code

Community📦 15 Skills
facebookfacebook
248.4k

react

AI agent skills for building, testing, and porting React core

Official📦 14 Skills