skills.rest
AutisticAF
AutisticAFCOMMUNITY
Explore all skills by this author →
GitHub

security

Review iOS, macOS, and watchOS apps for security vulnerabilities and fixes.

4|1|Updated Apr 2, 2026
Search Tags:#ios#security-review#keychain#network-security#biometric-auth#certificate-pinning#secure-enclave
One-click install
npx skills add https://github.com/AutisticAF/claude-code-apple-dev-plugin --skill security-autisticaf
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/AutisticAF/claude-code-apple-dev-plugin/tree/main/skills/security
Command: npx skills add https://github.com/AutisticAF/claude-code-apple-dev-plugin --skill security-autisticaf

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill helps developers and security reviewers identify and remediate security vulnerabilities across iOS, macOS, and watchOS applications by providing structured review phases, platform-specific guidance, and prioritized remediation plans.

Core Features & Use Cases

  • Project discovery: Locate security-related code paths and enumerate the app's attack surface.
  • Secure storage: Evaluate Keychain usage, accessibility flags, Data Protection classes, Secure Enclave integration, and avoid insecure storage like UserDefaults.
  • Biometric authentication: Validate LAContext usage, Face ID/Touch ID patterns, biometric-protected Keychain items, SwiftUI integration, and error handling.
  • Network security: Review ATS configuration, recommend certificate or public key pinning, harden URLSession settings, and identify anti-patterns that disable TLS validation.
  • Platform-specific checks: Assess entitlements, sandboxing, hardened runtime, Watch Connectivity, and HealthKit handling.
  • Deliverables: Prioritized findings with risk classification, actionable fixes, and an ordered action plan.

Quick Start

Run a security review of my iOS app repository, flag critical and high-risk issues, and provide prioritized remediation steps and example fixes.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a comprehensive security review for an iOS app?▼

A security review for iOS apps evaluates Keychain usage, biometric authentication via LAContext, network TLS settings, and certificate pinning to identify vulnerabilities and generate prioritized remediation steps with code examples and risk classifications.

How do I verify Keychain usage and Data Protection classes in macOS and watchOS apps?▼

Verify Keychain usage by checking accessibility flags and ensuring sensitive data avoids insecure storage like UserDefaults. Evaluate Data Protection classes and Secure Enclave integration to confirm proper secure storage implementation across your Apple applications.

What is the best way to harden URLSession settings and implement certificate pinning?▼

Harden URLSession settings by reviewing ATS configuration, implementing certificate or public key pinning, and identifying anti-patterns that disable TLS validation to ensure robust network security across your Apple applications.

How do I validate Face ID and Touch ID patterns using LAContext in SwiftUI?▼

Validate LAContext usage by checking Face ID and Touch ID integration patterns, ensuring proper biometric-protected Keychain items, verifying SwiftUI integration, and reviewing comprehensive error handling for biometric authentication failures.

What platform-specific security checks are needed for entitlements and sandboxing on Apple platforms?▼

Platform-specific security checks assess entitlements, sandboxing, hardened runtime, Watch Connectivity, and HealthKit handling to identify vulnerabilities and recommend fixes for iOS, macOS, and watchOS applications during pre-submission audits or code reviews.

When should I use Secure Enclave for secure storage instead of standard Keychain items?▼

Evaluate Secure Enclave usage during a security review to determine if highly sensitive cryptographic operations require it. Standard Keychain items with proper accessibility flags and Data Protection classes may suffice for less critical data storage needs.

Related Skills

Explore More Software Engineering Skills→
kvn8888kvn8888
3

app-store-review

Evaluate app code against Apple's App Store Review Guidelines.

Community
Advanced
ArabelaTsoArabelaTso
142

security-patch-advisor

Propose secure remediation strategies for detected security vulnerabilities.

Community
Advanced
onymchatonymchat

swift-security

Secures client-side Apple platform data with Keychain, biometrics, and CryptoKit.

Official
Advanced
xlelibertyxleliberty

security-pen-testing

Perform offensive security assessments with vulnerability scanning and penetration testing.

Community
Advanced