incogbyte / iOS-reverse-engineering-claude-skill

What it does

• IPA/App Extraction. Unpack IPA archives and .app bundles, dump Objective-C/Swift class headers via ipsw class-dump, extract Info.plist, entitlements, embedded frameworks, and string constants
• API Endpoint Discovery. Find HTTP endpoints across URLSession, Alamofire, Moya, AFNetworking, GraphQL, and WebSocket patterns
• Call Flow Tracing. Follow execution paths from ViewControllers through ViewModels/Presenters down to the networking layer
• Security Auditing. Scan for ATS exceptions, certificate pinning issues, weak crypto, keychain misuse, jailbreak detection, debug artifacts, insecure deserialization, XXE, and Zip Slip
• Cloud Credential Scanning. Deep-scan for leaked API keys and secrets from Firebase, AWS, GCP, Azure, Stripe, Twilio, SendGrid, and more — with LLM-assisted risk classification