objc-cryptographic-security-audit

Audit Objective-C source files for cryptographic vulnerabilities and anti-patterns.

Updated Jul 26, 2026

Search Tags:#code review #security #vulnerability #audit #cryptography #objective-c

Ready to run

npx skills add https://github.com/jvalinsky/garazyk --skill objc-cryptographic-security-audit

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: objc-cryptographic-security-audit
Source: https://github.com/jvalinsky/garazyk/tree/main/.opencode/skills/objc-cryptographic-security-audit
Command: npx skills add https://github.com/jvalinsky/garazyk --skill objc-cryptographic-security-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies and helps you fix critical security vulnerabilities in Objective-C code related to cryptographic operations, preventing data breaches and ensuring secure authentication and encryption.

Core Features & Use Cases

Vulnerability Detection: Scans for weak algorithms (MD5, SHA1, DES), hardcoded keys/IVs, timing attacks, and insecure random number generation.
Prioritized Triage: Provides clear priorities (P0-P3) for addressing identified issues.
Fix Patterns: Offers concrete examples and best practices for remediation.
Use Case: Reviewing the authentication module of a sensitive application to ensure all cryptographic functions are robust and resistant to common attacks.

Quick Start

Run the provided script to scan the current directory for cryptographic security issues.

Frequently Asked Questions about objc-cryptographic-security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit Objective-C code for cryptographic vulnerabilities?▼

Auditing Objective-C code for cryptographic vulnerabilities involves scanning source files to detect weak algorithms, hardcoded secrets, and insecure random number generation. The scan produces a summarized list of findings with prioritized remediation patterns.

What are common cryptographic security anti-patterns in Objective-C?▼

Common cryptographic security anti-patterns in Objective-C include using weak algorithms like MD5, SHA1, and DES, alongside hardcoded keys or IVs. Code is also vulnerable if it uses insecure random number generation or exposes timing attack vectors.

Do I need ripgrep installed to scan Objective-C source files for weak algorithms?▼

Yes, you need the ripgrep tool installed to scan Objective-C source files for weak algorithms. The Skill requires `rg` (ripgrep) to perform efficient searching across directories to detect cryptographic anti-patterns.

How are identified cryptographic vulnerabilities prioritized during a code review?▼

Identified cryptographic vulnerabilities are prioritized using a P0 through P3 triage system during a code review. This prioritization helps address critical security issues first, providing clear guidance on remediation order.

What is the best way to fix hardcoded cryptographic keys found in Objective-C source?▼

The best way to fix hardcoded cryptographic keys is to apply concrete fix patterns and best practices provided by the audit. The scan output offers specific examples for remediation to ensure robust authentication and encryption.