axiom-scan-security-privacy

Audit iOS and macOS source code for security vulnerabilities and privacy compliance gaps.

34|2|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/DengNaichen/Stet --skill axiom-scan-security-privacy
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: axiom-scan-security-privacy
Source: https://github.com/DengNaichen/Stet/tree/main/.agents/skills/axiom-scan-security-privacy
Command: npx skills add https://github.com/DengNaichen/Stet --skill axiom-scan-security-privacy

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill identifies critical security vulnerabilities, privacy manifest gaps, and potential App Store rejection triggers in iOS and macOS projects.

Core Features & Use Cases

  • Automated Compliance Scanning: Detects missing Privacy Manifests, insecure data storage, and hardcoded credentials.
  • App Store Readiness: Validates ATT usage descriptions, export compliance, and network transport security.
  • Use Case: Before submitting your app to the App Store, run this scan to ensure all required privacy reasons are declared and no sensitive data is leaked in logs or insecure storage.

Quick Start

Run the axiom-scan-security-privacy skill to perform a full security and privacy audit on the current repository.

Frequently Asked Questions about axiom-scan-security-privacy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect missing Privacy Manifest declarations in my iOS app?

Run an automated source code audit to detect missing Privacy Manifest declarations in your iOS app. This scans project files to identify gaps in required privacy reasons and validates adherence to Apple's App Store submission requirements.

What causes App Store rejection for privacy compliance issues?

App Store rejection for privacy compliance issues is caused by missing ATT usage descriptions, incomplete privacy manifests, insecure data storage, or hardcoded credentials. Automated scanning detects these rejection triggers before submission.

Can I scan macOS source code for hardcoded secrets and insecure storage?

Yes, you can scan macOS source code for hardcoded secrets and insecure storage. The audit analyzes project files to detect hardcoded credentials, insecure storage patterns, and missing privacy manifest declarations across iOS and macOS environments.

How to check iOS app store readiness for export compliance and network transport security?

Check iOS App Store readiness by scanning source code to validate export compliance and network transport security configurations. This verifies ATT usage descriptions and ensures all required privacy reasons are declared.

Does automated security scanning detect sensitive data leaked in logs?

Yes, automated security scanning detects sensitive data leaked in logs. The comprehensive audit analyzes iOS and macOS source code to identify vulnerabilities, insecure storage patterns, and potential data exposure before App Store submission.