app-dynamic-analysis-SKILL.md

What problem does it solve?

Provides an integrated workflow for assessing iOS app security by combining dynamic instrumentation (Frida), runtime exploration (Objection), SSL pinning bypass, keychain credential analysis, and IPA static analysis into a cohesive assessment, accelerating authorized security testing.

Core Features & Use Cases

• Frida-based dynamic instrumentation to observe and modify app behavior at runtime.
• Objection-based runtime exploration for quick in-context testing without recompiling.
• SSL pinning bypass and network analysis to allow proxying and traffic inspection in authorized engagements.
• Keychain extraction and credential analysis to identify insecure storage of secrets and tokens.
• IPA static analysis to review embedded binaries, entitlements, and external dependencies in a post-download review.
• Supports end-to-end assessments from initial static review to live runtime testing and reporting.

Quick Start

Provide a target IPA with --ipa for static analysis or supply a bundle ID with --bundle-id for dynamic Frida/Objection testing in an authorized engagement.