ios-security

Apply OWASP Mobile Top 10 checks and validate ATS configuration for iOS apps.

Updated Dec 22, 2025

Search Tags:#secure-development #security-review #keychain #vulnerability-assessment #ats #ios-security #owasp-mobile-top-10

Ready to run

npx skills add https://github.com/miyakawa2449/KiroBookmark --skill ios-security-miyakawa2449

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ios-security
Source: https://github.com/miyakawa2449/KiroBookmark/tree/main/.claude/skills/ios-security
Command: npx skills add https://github.com/miyakawa2449/KiroBookmark --skill ios-security-miyakawa2449

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

iOSアプリのセキュリティレビューを標準化し、OWASP Mobile Top 10チェック、ATS設定の検証、Keychainの適切な使用を評価します。

Core Features & Use Cases

OWASP Mobile Top 10チェックに基づく脆弱性評価とレポート作成
ATS設定の強制と機密データの安全な取り扱いの確認
実務シナリオ: 認証、データ保存、ネットワーク通信の領域でセキュリティギャップを洗い出し、修正指針を提供

Quick Start

Run this skill against your iOS project to generate a security-review checklist for the target app.

Frequently Asked Questions about ios-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform an OWASP Mobile Top 10 security review for my iOS app?▼

An iOS security review checks OWASP Mobile Top 10 vulnerabilities, ATS configuration, and Keychain usage. This skill generates an executable checklist to identify security gaps in authentication, data storage, and network communications, providing concrete remediation guidelines for iOS projects.

How do I validate App Transport Security (ATS) configuration for secure network communications?▼

Validating ATS configuration involves enforcing secure network connections and verifying proper exception handling for iOS apps. This skill reviews your ATS settings to ensure sensitive data is transmitted securely and highlights misconfigurations during network security assessments.

What is the best way to check Keychain usage for secure data storage in iOS?▼

Checking Keychain usage involves evaluating how sensitive data like authentication tokens and credentials are stored securely on iOS. This skill provides specific guidance on proper Keychain implementation to prevent data leakage during vulnerability assessments.

Can I use this security review for QA testing and vulnerability assessment workflows?▼

Yes, this security review is designed for security engineers, developers, and QA teams to perform vulnerability assessments. It standardizes the evaluation of secure data handling and network communications, delivering a concrete checklist to integrate into QA workflows.

What are the limitations of using a basic checklist for iOS vulnerability assessment?▼

Using a basic checklist limits the iOS vulnerability assessment to standard OWASP Mobile Top 10 checks, ATS validation, and Keychain guidance. It provides a concise security review rather than deep dynamic analysis or advanced penetration testing for complex iOS exploits.