Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add killvxk/cybersecurity-skills-zh --skill analyzing-ios-app-security-with-objectiongit clone --depth 1 https://github.com/killvxk/cybersecurity-skills-zhWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/killvxk/cybersecurity-skills-zh/analyzing-ios-app-security-with-objection)<a href="https://agentmods.dev/skills/killvxk/cybersecurity-skills-zh/analyzing-ios-app-security-with-objection"><img src="https://agentmods.dev/badge/skills/killvxk/cybersecurity-skills-zh/analyzing-ios-app-security-with-objection/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/killvxk/cybersecurity-skills-zh/analyzing-ios-app-security-with-objection"><img src="https://agentmods.dev/badge/skills/killvxk/cybersecurity-skills-zh/analyzing-ios-app-security-with-objection.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00119 | $0.01760 |
| Opus 5 | $0.00060 | $0.00880 |
| Sonnet 5 | $0.00024 | $0.00352 |
| Haiku 4.5 | $0.00012 | $0.00176 |
Grade A, and why
analyzing-ios-app-security-with-objection scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 185 lines — stays where its author put it; the contents beside it link to each section on GitHub.
使用 Objection 分析 iOS 应用安全
适用场景
以下情况使用本 skill：
- 在授权渗透测试（penetration test）期间对 iOS 应用程序执行运行时安全评估
- 检查 iOS Keychain、文件系统和内存中的敏感数据暴露情况
- 在安全测试期间绕过客户端安全控制（SSL pinning、越狱检测）
- 在无法访问源代码的情况下评估 iOS 应用的运行时行为
不适用于：在没有明确授权的情况下在生产设备上使用本 skill——Objection 会修改应用运行时行为，可能触发安全监控。
前置条件
- Python 3.10+ 及 pip
- 已安装 Objection：
pip install objection - 已安装 Frida：
pip install frida-tools - 目标 iOS 设备（已越狱并安装 Frida server，或已重新打包 IPA 的非越狱设备）
- 非越狱设备需使用
objection patchipa向 IPA 注入 Frida gadget - iOS 测试推荐使用 macOS（需要 Xcode、ideviceinstaller）
- USB 连接目标设备或网络 Frida server
工作流程
步骤 1：准备测试环境
针对越狱设备：
# 通过 Cydia/Sileo 在设备上安装 Frida server
# SSH 登录设备并启动 Frida server
ssh root@<device_ip> "/usr/sbin/frida-server -D"
# 验证 Frida 连接
frida-ps -U # 列出 USB 连接设备上的进程
针对非越狱设备（授权测试）：
# 向 IPA 注入 Frida gadget
objection patchipa --source target.ipa --codesign-signature "Apple Development: [email protected]"
# 安装已打包的 IPA
ideviceinstaller -i target-patched.ipa
步骤 2：将 Objection 附加到目标应用
# 通过 bundle ID 附加到正在运行的应用
objection --gadget "com.target.app" explore
# 或启动新的应用进程
objection --gadget "com.target.app" explore --startup-command "ios hooking list classes"
附加成功后，Objection 提供交互式 REPL 进行运行时探测。
步骤 3：评估数据存储安全（MASVS-STORAGE）
# 转储应用可访问的 iOS Keychain 条目
ios keychain dump
# 列出应用沙盒中的文件
ios plist cat Info.plist
env # 显示应用环境路径
# 检查 NSUserDefaults 中的敏感数据
ios nsuserdefaults get
# 列出 SQLite 数据库
sqlite connect app_data.db
sqlite execute query "SELECT * FROM credentials"
# 检查粘贴板中的敏感数据
ios pasteboard monitor
步骤 4：评估网络安全（MASVS-NETWORK）
# 禁用 SSL/TLS 证书固定（certificate pinning）
ios sslpinning disable
# 通过 Burp Suite 代理观察流量，验证 pinning 是否已绕过
# 监控与网络相关的类方法调用
ios hooking watch class NSURLSession
ios hooking watch class NSURLConnection
步骤 5：检查身份认证与授权（MASVS-AUTH）
# 列出所有 Objective-C 类
ios hooking list classes
# 搜索与认证相关的类
ios hooking search classes Auth
ios hooking search classes Login
ios hooking search classes Token
# Hook 认证方法以观察参数
ios hooking watch method "+[AuthManager validateToken:]" --dump-args --dump-return
# 监控生物认证调用
ios hooking watch class LAContext
What ships with it
7 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 185 lines · 119 tokens per session scan A 6b31788c99ca
analyzing-ios-app-security-with-objection is a skill published in the GitHub repository killvxk/cybersecurity-skills-zh (45 stars, last pushed 4mo ago), licensed Apache-2.0. It adds 119 tokens to every session and 1,760 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
analyzing-ios-app-security-with-objection
Runtime iOS app security testing with Objection (Frida): inspect keychain and filesystem data, explore app internals at runtime, and validate/bypass client-side protections during authorized mobile assessments.
analyzing-ios-app-security-with-objection
Use when performs runtime mobile security exploration of iOS applications using Objection, a Frida-powered toolkit that enables security testers to interact with app internals without jailbreaking. Use when assessing iOS app security posture, bypassing client-side protections, dumping keychain items, inspecting…
analyzing-ios-app-security-with-objection
Performs runtime mobile security exploration of iOS applications using Objection, a Frida-powered toolkit that enables security testers to interact with app internals without jailbreaking. Use when assessing iOS app security posture, bypassing client-side protections, dumping keychain items, inspecting filesystem…
analyzing-ios-app-security-with-objection
Performs runtime mobile security exploration of iOS applications using Objection, a Frida-powered toolkit that enables security testers to interact with app internals without jailbreaking. Use when assessing iOS app security posture, bypassing client-side protections, dumping keychain items, inspecting filesystem…
analyzing-ios-app-security-with-objection
Runtime iOS app security testing with Objection (Frida): inspect keychain and filesystem data, explore app internals at runtime, and validate/bypass client-side protections during authorized mobile assessments.
analyzing-ios-app-security-with-objection
Performs runtime mobile security exploration of iOS applications using Objection, a Frida-powered toolkit that enables security testers to interact with app internals without jailbreaking. Use when assessing iOS app security posture, bypassing client-side protections, dumping keychain items, inspecting filesystem…