skills.rest
cruisediary
cruisediaryCOMMUNITY
Explore all skills by this author →
GitHub

private-api-audit

Scan Swift/Objective-C sources for private Apple API usage and generate prioritized findings.

13|1|Updated Mar 29, 2026
Search Tags:#apple#static-analysis#app-store#binary-analysis#private-api#guidelines-2-5-1
One-click install
npx skills add https://github.com/cruisediary/apple-app-review-skills --skill private-api-audit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: private-api-audit
Source: https://github.com/cruisediary/apple-app-review-skills/tree/main/skills/quality/private-api-audit
Command: npx skills add https://github.com/cruisediary/apple-app-review-skills --skill private-api-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Detects usage of private Apple APIs, undocumented frameworks, and runtime introspection patterns that bypass the public SDK — enforcing Guideline 2.5.1.

Core Features & Use Cases

  • Detects dynamic loading of private frameworks via dlopen/dlsym and related patterns.
  • Flags private symbol usage via NSClassFromString and underscore-prefixed methods.
  • Alerts on private framework imports and non-public API references to support pre-submission audits.

Quick Start

Run the private-api-audit tool on your project to detect private API usage and generate a remediation report.

Frequently Asked Questions about private-api-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect private API usage in my iOS app to pass App Store review?▼

Scanning your Swift and Objective-C source code flags private API usage by detecting dynamic loading, private symbol references, and private framework imports. This identifies patterns that bypass the public SDK and violate App Store Guideline 2.5.1 before submission.

What are common private API patterns that cause App Store rejection?▼

Common private API patterns causing rejection include dynamic loading via dlopen or dlsym, referencing private symbols through NSClassFromString, underscore-prefixed methods, and importing undocumented private frameworks that bypass the public SDK.

Can I run a private API audit on both Swift and Objective-C source files?▼

Yes, you can run a private API audit on both Swift and Objective-C source files. The tool scans both languages to identify runtime introspection patterns and non-public API references suitable for iOS and macOS pre-submission compliance checks.

How do I scan my Xcode project for private framework imports before submission?▼

Scan your Xcode project for private framework imports by running an automated audit that checks source code for non-public API references. It produces a prioritized, structured findings list to guide remediation before your App Store submission.

Does this static analysis tool detect runtime introspection patterns in macOS apps?▼

Yes, this static analysis tool detects runtime introspection patterns in macOS apps. It applies to both iOS and macOS projects, flagging dynamic loading and private symbol references that bypass the public SDK to ensure compliance.

Related Skills

Explore More Legal & Compliance Skills→
michaelboedingmichaelboeding
24

add-to-xcode

Register new source files with an Xcode project via a Ruby script.

Community
Advanced
wanghaishengwanghaisheng
10

iosdev-cn

Guide iOS app deployment in China through signing, testing, and App Store submission.

Community
Intermediate
89jobrien89jobrien
4

security-audit

Identify software codebase vulnerabilities and map findings to OWASP Top 10.

Community
Advanced
blitzdotdevblitzdotdev
14

reviewer

Inspect Xcode projects against 100+ App Store Review Guidelines.

Official
Advanced