security-audit

You can scan an iOS app for security misconfigurations by running an automated grep-based rule engine that detects hardcoded credentials, storage risks, network trust issues, and privacy manifest gaps. The scan outputs a structured security audit report.

The best way to check for privacy manifest gaps is to analyze your PrivacyInfo artifacts and Info.plist configurations. An automated scan detects missing permissions data and outputs a focused report highlighting privacy compliance issues.

Yes, you can run a quick surface scan to detect obvious security issues without exhaustive checks. This mode surfaces immediate risks quickly, while a full interactive audit covers secrets, storage, network, and privacy configurations in depth.

Yes, the security audit works with both iOS and macOS apps. It scans project files across both platforms to detect credentials, storage misconfigurations, network trust issues, and privacy manifest problems.

You can audit only network trust issues by selecting the Network category for a focused scan. This targets specific security domains like network configurations or secrets, allowing targeted remediation without running a full audit.

The automated security audit report uses a structured markdown format, saved directly to your project as `.agents/research/YYYY-MM-DD-security-audit.md`. This file documents all detected credentials, misconfigurations, and privacy gaps.