skills.rest
onymchat
onymchatOFFICIAL
Explore all skills by this author →
GitHub

device-integrity

Verify device legitimacy and app integrity on server requests with DeviceCheck and App Attest.

Updated Apr 30, 2026
Search Tags:#security#ios#security-patterns#fraud-prevention#server-verification#app-attest#device-check
One-click install
npx skills add https://github.com/onymchat/onym-ios --skill device-integrity-onymchat
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: device-integrity
Source: https://github.com/onymchat/onym-ios/tree/main/.claude/skills/device-integrity
Command: npx skills add https://github.com/onymchat/onym-ios --skill device-integrity-onymchat

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Verify device legitimacy and app integrity on server requests.

Core Features & Use Cases

  • DeviceCheck tokens to identify devices
  • App Attest key generation, attestation, and assertion flows to prove app integrity
  • Server-side verification guidance and error handling for production deployments

Quick Start

Attest the App Attest key on a real device and begin signing requests with attested assertions to your server.

Frequently Asked Questions about device-integrity

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify iOS app integrity and device legitimacy on server requests?▼

Verify iOS app integrity by applying DeviceCheck tokens and App Attest flows to prove app legitimacy on server requests. This includes generating cryptographic keys, attesting them, and validating per-request assertions server-side.

How do I implement App Attest key generation and attestation flows to prevent iOS fraud?▼

Implement App Attest by generating a cryptographic key on a real device, attesting it to prove app integrity, and signing subsequent server requests with per-request assertions to prevent fraud.

What is the difference between DeviceCheck and App Attest for iOS security patterns?▼

DeviceCheck provides tokens to identify device legitimacy across app installations, while App Attest proves app integrity through key generation, attestation, and per-request assertions to secure server communications.

How do I handle server-side verification and replay protection for App Attest assertions?▼

Handle server-side verification by validating per-request assertions, enforcing replay protection, checking environment entitlements, and managing robust error handling for DCError scenarios during production deployments.

Does device integrity verification work on the iOS simulator?▼

Device integrity verification does not work on the iOS simulator. You must attest the App Attest key and generate assertions on a real device to successfully validate app integrity on your server.

Related Skills

Explore More Software Engineering Skills→
asnar00asnar00
1

eos-stop-app

Stop an Android app on a connected device via adb shell am force-stop.

Community
Intermediate
ShunmeiChoShunmeiCho
1

backend-patterns

Guide backend architecture patterns for Node.js, Express, and Next.js APIs.

Community
Intermediate
Roy-wonjiRoy-wonji

device-integrity

Verify iOS device legitimacy and app integrity via DeviceCheck and App Attest.

Community
Advanced
femitzfemitz

device-integrity

Validate Apple device integrity using DeviceCheck and App Attest APIs.

Community
Advanced