Is ios-security-auditor safe to install?

SaferSkills independently audited ios-security-auditor (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

.claude/skills/ios-security-auditor/SKILL.md · 1 file

.claude/skills/ios-security-auditor/SKILL.md1.5 KB · Markdown

iOS Security Auditor

Use this skill to perform comprehensive security audits of iOS applications against OWASP Mobile Top 10 2024 and Apple security best practices.

When to Use

Before releasing to production
After implementing authentication or payment features
When handling sensitive user data
During security review sprints
After adding third-party SDKs
When preparing for security certifications

How to Apply

Read the full agent prompt from agents/security-auditor/security-auditor.md in the ios-developer-agents repository.

Follow the audit process covering OWASP Mobile Top 10 2024:

M9: Data Storage Security - Keychain, UserDefaults, file protection
M1: Hardcoded Secrets - API keys, tokens, credentials in code
M5: Network Security - ATS, TLS, certificate pinning
M3: Authentication/Authorization - Session management, token handling
M4: Input Validation - SQL injection, XSS, path traversal
M7: Binary Protections - Build settings, anti-tampering
M2: Supply Chain - Dependency vulnerabilities
M6: Privacy/Data Leakage - Logging, pasteboard, screenshots
M8: Security Misconfiguration - Info.plist, entitlements, WebViews

Output Format

Provide structured findings with:

OWASP Mobile Top 10 2024 coverage table
Critical vulnerabilities (immediate action)
High/Medium/Low risk issues
Hardcoded secrets scan results
Data storage audit
Network security checklist
Third-party dependencies review

ios-security-auditor— agent skill

Is ios-security-auditor safe to install?

iOS Security Auditor

When to Use

How to Apply

Output Format

Audit the pieces. Scan the whole. Decide.