coredevice-toolkit

coredevice-toolkit is a skill for Claude Code, Codex from OpenMinis/MinisSkills. It costs 185 tokens per session (2,951 once invoked), scanned B, original, MIT.

An iPhone-based toolkit for accessing Apple's CoreDevice developer functions without keeping the iPhone connected to a Mac by USB. It uses a local network tunnel and requires Developer Mode and pairing data.

In plain words
What is it for?
It is for setting up and using CoreDevice command-line tools directly on an iPhone, subject to the listed iOS and network requirements.
Why use it?
It removes the need for a constant USB connection to Xcode or a Mac for the supported device-development tasks.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit It is for setting up and using CoreDevice command-line tools directly on an iPhone, subject to the listed iOS and network requirements.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/openminis/minisskills/coredevice-toolkit
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add OpenMinis/MinisSkills --skill coredevice-toolkit
Clone the repo
git clone --depth 1 https://github.com/OpenMinis/MinisSkills

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for coredevice-toolkit

README.md
[![agentmods](https://agentmods.dev/badge/skills/openminis/minisskills/coredevice-toolkit/github.svg)](https://agentmods.dev/skills/openminis/minisskills/coredevice-toolkit)
Your own site
<a href="https://agentmods.dev/skills/openminis/minisskills/coredevice-toolkit"><img src="https://agentmods.dev/badge/skills/openminis/minisskills/coredevice-toolkit/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for coredevice-toolkit

Your own site · 80×15
<a href="https://agentmods.dev/skills/openminis/minisskills/coredevice-toolkit"><img src="https://agentmods.dev/badge/skills/openminis/minisskills/coredevice-toolkit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 185 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,951 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00185 $0.02951
Opus 5.5 $0.00074 $0.01180
Sonnet 5.5 $0.00037 $0.00590
Haiku 4.5 $0.00018 $0.00295

Measured yesterday against content hash 3ee572e94dda, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade B, and why

coredevice-toolkit scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

The scan reads SKILL.md. This mod also ships 3 executable files (scripts/coredevice_session.py, scripts/setup.sh, scripts/tls_psk_proxy.js), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

- **强制权限拦截**:严禁加载权限过宽(Group / Other 可读)的配对文件!若文件权限不符合 `chmod 600`(属主独占只读/读写),底座将主动抛出 `PermissionError` 拒绝启动并提供阻断修复指引;
coredevice-toolkit/SKILL.md · 146 lines

How it starts

The opening of the file, as written. The whole thing — 146 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CoreDevice RSD 极客工具箱 (iOS 单机开发者中枢)

本 Skill 将原本必须通过 USB 数据线连接 Mac/Xcode 才能调用的苹果底层开发者特权(CoreDevice RSD 加密隧道),通过 Surge 本地回环反射 + 纯用户态网络协议栈 完整搬迁至 iPhone 单机内部。


一、 前置准备与环境要求

  1. 系统版本:
    • 已实测验证 (Verified):iOS 18.0+(包含当前真机环境);
    • 实验性支持 (Experimental):iOS 17.0 ~ 17.7(因部分小版本系统 remoted 守护进程可能仅监听 IPv6 Link-Local 或存在端口漂移,欢迎社区测试反馈);
    • 需在系统【设置 ➡️ 隐私与安全性】中开启「开发者模式」;
  2. 本地回环基建:Surge 启用 10.7.0.1 = reflect 与 tun-included-routes = 10.7.0.1/32(详见 Surge 回环配置指南);
  3. 配对文件:手机与电脑配对生成的 .plist 文件或 SideStore 配对文件(详见 配对文件指南);
  4. 一键初始化:在终端运行 sh /var/minis/skills/coredevice-toolkit/scripts/setup.sh,自动安装依赖并将全套 CLI 注册至全局路径。

二、 架构原理:单机莫比乌斯环 🔌🔄

┌────────────────────────────────────────────────────────────────────────┐
│                        iPhone 单机内部 (Non-Jailbroken)                 │
│                                                                        │
│   [ 应用层 / CLI 工具: cdtk-* ]                                         │
│       │                                                                │
│       ▼                                                                │
│   coredevice_session.py (CoreDeviceSession 异步上下文管理器)            │
│       │                                                                │
│       ├── Node.js TLS-PSK 桥接 (通过 stdin 安全投递 PSK,0 命令行泄露) │
│       ▼                                                                │
│   pmd-pytcp (纯用户态 TCP/IP 协议栈,无 root 免虚拟网卡拨号)            │
│       │                                                                │
│       ▼                                                                │
│   发往 10.7.0.1:49152 (目标:本地开发者配对服务)                         │
│       │                                                                │
│       ▼                                                                │
│   Surge IP Rewrite (10.7.0.1 = reflect 本地反射回环)                   │
│       │                                                                │
│       ▼                                                                │
│   iOS 系统内核守护进程: remoted / launchd (85 大官方 Remote Services)   │
└────────────────────────────────────────────────────────────────────────┘

Read the full file on GitHub · 146 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 146 lines · 185 tokens per session scan B 3ee572e94dda

Subscribe to this mod's changes

coredevice-toolkit is a skill published in the GitHub repository OpenMinis/MinisSkills (502 stars, last pushed 2d ago), licensed MIT. It adds 185 tokens to every session and 2,951 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-19.

Related

Other skills, from other repositories