[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M73FGX2GEKB2T2C3N3VYYVRF":3,"skill-same:01M73FGX2GEKB2T2C3N3VYYVRF":107},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":16,"sourceHtmlUrl":17,"categories":18,"keywords":19,"publishedAt":20,"linkOnly":21,"markdownContent":22,"markdownBody":23,"frontMatter":24,"refName":49,"commitSha":50,"skillDirectory":51,"forksCount":52,"repositoryHtmlUrl":53,"repositoryHomepageUrl":54,"ownerHtmlUrl":55,"ownerBlogUrl":56,"ownerDescription":57,"updatedAt":58,"install":59,"resources":72},"01M73FGX2GEKB2T2C3N3VYYVRF","reverse-engineering-ios-app-with-frida",null,"Reverse engineers iOS applications using Frida dynamic instrumentation to understand internal logic, extract encryption keys, bypass security controls, and discover hidden functionality without source code access. Use when performing authorized iOS penetration testing, analyzing proprietary protocols, understanding obfuscated logic, or extracting runtime secrets from iOS binaries. Activates for requests involving iOS reverse engineering, Frida iOS hooking, Objective-C\u002FSwift method tracing, or iOS binary analysis.","Horonomos-laps\u002FYana-AI","Horonomos-laps","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F355299122?v=4","01M76B3QPXE88ET2SQPDPVATZT"," Horonomos-laps","01M72ZQRJPCYPSSWT4D00VJR2A",13,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Freverse-engineering-ios-app-with-frida\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Freverse-engineering-ios-app-with-frida\u002FSKILL.md",[],[],"2026-11-11 15:11:14",false,"---\nname: reverse-engineering-ios-app-with-frida\ndescription: 'Reverse engineers iOS applications using Frida dynamic instrumentation\n  to understand internal logic, extract encryption keys, bypass security controls,\n  and discover hidden functionality without source code access. Use when performing\n  authorized iOS penetration testing, analyzing proprietary protocols, understanding\n  obfuscated logic, or extracting runtime secrets from iOS binaries. Activates for\n  requests involving iOS reverse engineering, Frida iOS hooking, Objective-C\u002FSwift\n  method tracing, or iOS binary analysis.\n\n  '\ndomain: cybersecurity\nsubdomain: mobile-security\nauthor: mahipal\ntags:\n- mobile-security\n- ios\n- frida\n- reverse-engineering\n- owasp-mobile\n- penetration-testing\nversion: 1.0.0\nlicense: Apache-2.0\nnist_csf:\n- PR.PS-01\n- PR.AA-05\n- ID.RA-01\n- DE.CM-09\nmitre_attack:\n- T1059\n- T1056\n- T1036\n- T1078\n- T1573\nsource: https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\nsource_commit: 04450304b12645cb2b974ab96d28c0664758a88d\n---\n# Reverse Engineering iOS App with Frida\n\n## When to Use\n\nUse this skill when:\n- Analyzing iOS app internals during authorized security assessments without source code\n- Extracting encryption keys, API secrets, or proprietary protocol details from running iOS apps\n- Understanding obfuscated Swift\u002FObjective-C logic through runtime method tracing\n- Bypassing complex security mechanisms (jailbreak detection, anti-tampering, anti-debugging)\n\n**Do not use** this skill for unauthorized reverse engineering that violates terms of service or intellectual property law.\n\n## Prerequisites\n\n- Jailbroken iOS device with Frida server installed via Cydia\u002FSileo, or non-jailbroken device with Frida Gadget-injected IPA\n- Python 3.10+ with `frida-tools` (`pip install frida-tools`)\n- USB connection to iOS device\n- class-dump or dsdump for Objective-C header extraction\n- Hopper Disassembler or Ghidra for static binary analysis (complementary)\n- Knowledge of Objective-C runtime and Swift name mangling\n\n## Workflow\n\n### Step 1: Extract and Analyze the Binary\n\n```bash\n# On jailbroken device, find app binary\nssh root@\u003Cdevice_ip>\nfind \u002Fvar\u002Fcontainers\u002FBundle\u002FApplication\u002F -name \"TargetApp\" -type f\n\n# Pull decrypted binary (apps from App Store are encrypted with FairPlay)\n# Use frida-ios-dump or Clutch for decryption\npip install frida-ios-dump\ndump.py com.target.app\n\n# Extract Objective-C class headers\nclass-dump -H decrypted_binary -o headers\u002F\nls headers\u002F  # Lists all class header files\n```\n\n### Step 2: Enumerate Classes and Methods at Runtime\n\n```javascript\n\u002F\u002F enumerate_classes.js - List all loaded classes\nJava.perform(function() {});  \u002F\u002F N\u002FA for iOS\n\n\u002F\u002F iOS uses ObjC runtime\nif (ObjC.available) {\n    var classes = ObjC.classes;\n    for (var className in classes) {\n        if (className.indexOf(\"Target\") !== -1 ||\n            className.indexOf(\"Auth\") !== -1 ||\n            className.indexOf(\"Crypto\") !== -1) {\n            console.log(\"[Class] \" + className);\n\n            \u002F\u002F List methods\n            var methods = classes[className].$ownMethods;\n            for (var i = 0; i \u003C methods.length; i++) {\n                console.log(\"  [Method] \" + methods[i]);\n            }\n        }\n    }\n}\n```\n\n```bash\nfrida -U -n TargetApp -l enumerate_classes.js\n```\n\n### Step 3: Trace Method Calls with frida-trace\n\n```bash\n# Trace all methods of a class\nfrida-trace -U -n TargetApp -m \"*[TargetAuth *]\"\n\n# Trace specific patterns\nfrida-trace -U -n TargetApp -m \"*[*Crypto* *]\"\nfrida-trace -U -n TargetApp -m \"*[*KeyChain* *]\"\nfrida-trace -U -n TargetApp -m \"*[*Token* *]\"\n\n# Trace Swift methods (mangled names)\nfrida-trace -U -n TargetApp -m \"*[*$s*Auth*]\"\n```\n\n### Step 4: Hook and Modify Method Behavior\n\n```javascript\n\u002F\u002F hook_auth.js - Intercept authentication logic\nif (ObjC.available) {\n    \u002F\u002F Hook Objective-C method\n    var AuthManager = ObjC.classes.AuthManager;\n    if (AuthManager) {\n        Interceptor.attach(AuthManager[\"- validateToken:\"].implementation, {\n            onEnter: function(args) {\n                \u002F\u002F args[0] = self, args[1] = selector, args[2+] = method args\n                var token = new ObjC.Object(args[2]);\n                console.log(\"[Auth] validateToken called with: \" + token.toString());\n            },\n            onLeave: function(retval) {\n                console.log(\"[Auth] validateToken returned: \" + retval);\n                \u002F\u002F Optionally modify return value\n                \u002F\u002F retval.replace(ptr(1));  \u002F\u002F Force return true\n            }\n        });\n    }\n\n    \u002F\u002F Hook CommonCrypto for encryption analysis\n    var CCCrypt = Module.findExportByName(\"libcommonCrypto.dylib\", \"CCCrypt\");\n    if (CCCrypt) {\n        Interceptor.attach(CCCrypt, {\n            onEnter: function(args) {\n                this.operation = args[0].toInt32();  \u002F\u002F 0=encrypt, 1=decrypt\n                this.algorithm = args[1].toInt32();  \u002F\u002F 0=AES128, 1=DES, 2=3DES\n                this.keyLength = args[4].toInt32();\n                this.key = Memory.readByteArray(args[3], this.keyLength);\n                console.log(\"[CCCrypt] Op:\" + (this.operation === 0 ? \"Encrypt\" : \"Decrypt\"));\n                console.log(\"[CCCrypt] Key: \" + hexify(this.key));\n            },\n            onLeave: function(retval) {\n                console.log(\"[CCCrypt] Status: \" + retval);\n            }\n        });\n    }\n}\n\nfunction hexify(buffer) {\n    var bytes = new Uint8Array(buffer);\n    var hex = [];\n    for (var i = 0; i \u003C bytes.length; i++) {\n        hex.push((\"0\" + bytes[i].toString(16)).slice(-2));\n    }\n    return hex.join(\"\");\n}\n```\n\n### Step 5: Analyze Swift Code\n\n```javascript\n\u002F\u002F swift_analysis.js - Hook Swift methods\n\u002F\u002F Swift methods use name mangling: $s\u003Cmodule>\u003Cclass>\u003Cmethod>\n\u002F\u002F Use frida-trace to discover actual mangled names first\n\nif (ObjC.available) {\n    \u002F\u002F Swift classes that inherit from NSObject are accessible via ObjC runtime\n    var swiftClasses = Object.keys(ObjC.classes).filter(function(name) {\n        return name.indexOf(\"_TtC\") === 0 || name.indexOf(\"TargetApp.\") !== -1;\n    });\n\n    swiftClasses.forEach(function(className) {\n        console.log(\"[Swift] \" + className);\n        var methods = ObjC.classes[className].$ownMethods;\n        methods.forEach(function(method) {\n            console.log(\"  \" + method);\n        });\n    });\n}\n\n\u002F\u002F For pure Swift (non-ObjC-bridged), use Module.enumerateExports\nModule.enumerateExports(\"TargetApp\", {\n    onMatch: function(exp) {\n        if (exp.name.indexOf(\"Auth\") !== -1 || exp.name.indexOf(\"Crypto\") !== -1) {\n            console.log(\"[Export] \" + exp.name + \" @ \" + exp.address);\n        }\n    },\n    onComplete: function() {}\n});\n```\n\n### Step 6: Extract Secrets and Proprietary Data\n\n```javascript\n\u002F\u002F extract_secrets.js\nif (ObjC.available) {\n    \u002F\u002F Hook NSUserDefaults\n    var NSUserDefaults = ObjC.classes.NSUserDefaults;\n    Interceptor.attach(NSUserDefaults[\"- objectForKey:\"].implementation, {\n        onEnter: function(args) {\n            this.key = new ObjC.Object(args[2]).toString();\n        },\n        onLeave: function(retval) {\n            if (retval.isNull()) return;\n            var value = new ObjC.Object(retval);\n            console.log(\"[NSUserDefaults] \" + this.key + \" = \" + value.toString());\n        }\n    });\n\n    \u002F\u002F Hook Keychain access\n    var SecItemCopyMatching = Module.findExportByName(\"Security\", \"SecItemCopyMatching\");\n    Interceptor.attach(SecItemCopyMatching, {\n        onEnter: function(args) {\n            var query = new ObjC.Object(args[0]);\n            console.log(\"[Keychain] Query: \" + query.toString());\n        },\n        onLeave: function(retval) {\n            console.log(\"[Keychain] Result: \" + retval);\n        }\n    });\n}\n```\n\n## Key Concepts\n\n| Term | Definition |\n|------|-----------|\n| **Objective-C Runtime** | Dynamic runtime enabling method dispatch, class introspection, and method swizzling at runtime |\n| **Swift Name Mangling** | Compiler-applied encoding of Swift function signatures into linker-compatible symbol names |\n| **FairPlay DRM** | Apple's encryption applied to App Store binaries; must be decrypted before static analysis |\n| **class-dump** | Tool extracting Objective-C class declarations from Mach-O binaries for header-level analysis |\n| **CommonCrypto** | Apple's C-level cryptographic library; primary target for encryption key extraction via Frida hooks |\n\n## Tools & Systems\n\n- **Frida**: Dynamic instrumentation framework for iOS runtime hooking and method interception\n- **frida-trace**: Automated tracing utility that generates handler stubs for matched methods\n- **frida-ios-dump**: Tool for decrypting FairPlay-protected iOS apps via memory dumping\n- **class-dump \u002F dsdump**: Objective-C header extraction from Mach-O binaries\n- **Ghidra**: NSA's reverse engineering framework for static ARM64 binary analysis of iOS apps\n\n## Common Pitfalls\n\n- **FairPlay encryption**: Apps downloaded from the App Store are encrypted. You must decrypt before static analysis. Use frida-ios-dump on a jailbroken device.\n- **Swift-only classes**: Pure Swift classes without `@objc` annotation are not visible through `ObjC.classes`. Use `Module.enumerateExports()` instead.\n- **Stripped binaries**: Release builds strip debug symbols. Combine frida-trace with class-dump output for effective analysis.\n- **Anti-Frida measures**: Sophisticated apps check for Frida artifacts (frida-server process, Frida agent strings in memory, injected libraries in dyld). Use stealthy Frida builds or Frida Gadget injection.\n","# Reverse Engineering iOS App with Frida\n\n## When to Use\n\nUse this skill when:\n- Analyzing iOS app internals during authorized security assessments without source code\n- Extracting encryption keys, API secrets, or proprietary protocol details from running iOS apps\n- Understanding obfuscated Swift\u002FObjective-C logic through runtime method tracing\n- Bypassing complex security mechanisms (jailbreak detection, anti-tampering, anti-debugging)\n\n**Do not use** this skill for unauthorized reverse engineering that violates terms of service or intellectual property law.\n\n## Prerequisites\n\n- Jailbroken iOS device with Frida server installed via Cydia\u002FSileo, or non-jailbroken device with Frida Gadget-injected IPA\n- Python 3.10+ with `frida-tools` (`pip install frida-tools`)\n- USB connection to iOS device\n- class-dump or dsdump for Objective-C header extraction\n- Hopper Disassembler or Ghidra for static binary analysis (complementary)\n- Knowledge of Objective-C runtime and Swift name mangling\n\n## Workflow\n\n### Step 1: Extract and Analyze the Binary\n\n```bash\n# On jailbroken device, find app binary\nssh root@\u003Cdevice_ip>\nfind \u002Fvar\u002Fcontainers\u002FBundle\u002FApplication\u002F -name \"TargetApp\" -type f\n\n# Pull decrypted binary (apps from App Store are encrypted with FairPlay)\n# Use frida-ios-dump or Clutch for decryption\npip install frida-ios-dump\ndump.py com.target.app\n\n# Extract Objective-C class headers\nclass-dump -H decrypted_binary -o headers\u002F\nls headers\u002F  # Lists all class header files\n```\n\n### Step 2: Enumerate Classes and Methods at Runtime\n\n```javascript\n\u002F\u002F enumerate_classes.js - List all loaded classes\nJava.perform(function() {});  \u002F\u002F N\u002FA for iOS\n\n\u002F\u002F iOS uses ObjC runtime\nif (ObjC.available) {\n    var classes = ObjC.classes;\n    for (var className in classes) {\n        if (className.indexOf(\"Target\") !== -1 ||\n            className.indexOf(\"Auth\") !== -1 ||\n            className.indexOf(\"Crypto\") !== -1) {\n            console.log(\"[Class] \" + className);\n\n            \u002F\u002F List methods\n            var methods = classes[className].$ownMethods;\n            for (var i = 0; i \u003C methods.length; i++) {\n                console.log(\"  [Method] \" + methods[i]);\n            }\n        }\n    }\n}\n```\n\n```bash\nfrida -U -n TargetApp -l enumerate_classes.js\n```\n\n### Step 3: Trace Method Calls with frida-trace\n\n```bash\n# Trace all methods of a class\nfrida-trace -U -n TargetApp -m \"*[TargetAuth *]\"\n\n# Trace specific patterns\nfrida-trace -U -n TargetApp -m \"*[*Crypto* *]\"\nfrida-trace -U -n TargetApp -m \"*[*KeyChain* *]\"\nfrida-trace -U -n TargetApp -m \"*[*Token* *]\"\n\n# Trace Swift methods (mangled names)\nfrida-trace -U -n TargetApp -m \"*[*$s*Auth*]\"\n```\n\n### Step 4: Hook and Modify Method Behavior\n\n```javascript\n\u002F\u002F hook_auth.js - Intercept authentication logic\nif (ObjC.available) {\n    \u002F\u002F Hook Objective-C method\n    var AuthManager = ObjC.classes.AuthManager;\n    if (AuthManager) {\n        Interceptor.attach(AuthManager[\"- validateToken:\"].implementation, {\n            onEnter: function(args) {\n                \u002F\u002F args[0] = self, args[1] = selector, args[2+] = method args\n                var token = new ObjC.Object(args[2]);\n                console.log(\"[Auth] validateToken called with: \" + token.toString());\n            },\n            onLeave: function(retval) {\n                console.log(\"[Auth] validateToken returned: \" + retval);\n                \u002F\u002F Optionally modify return value\n                \u002F\u002F retval.replace(ptr(1));  \u002F\u002F Force return true\n            }\n        });\n    }\n\n    \u002F\u002F Hook CommonCrypto for encryption analysis\n    var CCCrypt = Module.findExportByName(\"libcommonCrypto.dylib\", \"CCCrypt\");\n    if (CCCrypt) {\n        Interceptor.attach(CCCrypt, {\n            onEnter: function(args) {\n                this.operation = args[0].toInt32();  \u002F\u002F 0=encrypt, 1=decrypt\n                this.algorithm = args[1].toInt32();  \u002F\u002F 0=AES128, 1=DES, 2=3DES\n                this.keyLength = args[4].toInt32();\n                this.key = Memory.readByteArray(args[3], this.keyLength);\n                console.log(\"[CCCrypt] Op:\" + (this.operation === 0 ? \"Encrypt\" : \"Decrypt\"));\n                console.log(\"[CCCrypt] Key: \" + hexify(this.key));\n            },\n            onLeave: function(retval) {\n                console.log(\"[CCCrypt] Status: \" + retval);\n            }\n        });\n    }\n}\n\nfunction hexify(buffer) {\n    var bytes = new Uint8Array(buffer);\n    var hex = [];\n    for (var i = 0; i \u003C bytes.length; i++) {\n        hex.push((\"0\" + bytes[i].toString(16)).slice(-2));\n    }\n    return hex.join(\"\");\n}\n```\n\n### Step 5: Analyze Swift Code\n\n```javascript\n\u002F\u002F swift_analysis.js - Hook Swift methods\n\u002F\u002F Swift methods use name mangling: $s\u003Cmodule>\u003Cclass>\u003Cmethod>\n\u002F\u002F Use frida-trace to discover actual mangled names first\n\nif (ObjC.available) {\n    \u002F\u002F Swift classes that inherit from NSObject are accessible via ObjC runtime\n    var swiftClasses = Object.keys(ObjC.classes).filter(function(name) {\n        return name.indexOf(\"_TtC\") === 0 || name.indexOf(\"TargetApp.\") !== -1;\n    });\n\n    swiftClasses.forEach(function(className) {\n        console.log(\"[Swift] \" + className);\n        var methods = ObjC.classes[className].$ownMethods;\n        methods.forEach(function(method) {\n            console.log(\"  \" + method);\n        });\n    });\n}\n\n\u002F\u002F For pure Swift (non-ObjC-bridged), use Module.enumerateExports\nModule.enumerateExports(\"TargetApp\", {\n    onMatch: function(exp) {\n        if (exp.name.indexOf(\"Auth\") !== -1 || exp.name.indexOf(\"Crypto\") !== -1) {\n            console.log(\"[Export] \" + exp.name + \" @ \" + exp.address);\n        }\n    },\n    onComplete: function() {}\n});\n```\n\n### Step 6: Extract Secrets and Proprietary Data\n\n```javascript\n\u002F\u002F extract_secrets.js\nif (ObjC.available) {\n    \u002F\u002F Hook NSUserDefaults\n    var NSUserDefaults = ObjC.classes.NSUserDefaults;\n    Interceptor.attach(NSUserDefaults[\"- objectForKey:\"].implementation, {\n        onEnter: function(args) {\n            this.key = new ObjC.Object(args[2]).toString();\n        },\n        onLeave: function(retval) {\n            if (retval.isNull()) return;\n            var value = new ObjC.Object(retval);\n            console.log(\"[NSUserDefaults] \" + this.key + \" = \" + value.toString());\n        }\n    });\n\n    \u002F\u002F Hook Keychain access\n    var SecItemCopyMatching = Module.findExportByName(\"Security\", \"SecItemCopyMatching\");\n    Interceptor.attach(SecItemCopyMatching, {\n        onEnter: function(args) {\n            var query = new ObjC.Object(args[0]);\n            console.log(\"[Keychain] Query: \" + query.toString());\n        },\n        onLeave: function(retval) {\n            console.log(\"[Keychain] Result: \" + retval);\n        }\n    });\n}\n```\n\n## Key Concepts\n\n| Term | Definition |\n|------|-----------|\n| **Objective-C Runtime** | Dynamic runtime enabling method dispatch, class introspection, and method swizzling at runtime |\n| **Swift Name Mangling** | Compiler-applied encoding of Swift function signatures into linker-compatible symbol names |\n| **FairPlay DRM** | Apple's encryption applied to App Store binaries; must be decrypted before static analysis |\n| **class-dump** | Tool extracting Objective-C class declarations from Mach-O binaries for header-level analysis |\n| **CommonCrypto** | Apple's C-level cryptographic library; primary target for encryption key extraction via Frida hooks |\n\n## Tools & Systems\n\n- **Frida**: Dynamic instrumentation framework for iOS runtime hooking and method interception\n- **frida-trace**: Automated tracing utility that generates handler stubs for matched methods\n- **frida-ios-dump**: Tool for decrypting FairPlay-protected iOS apps via memory dumping\n- **class-dump \u002F dsdump**: Objective-C header extraction from Mach-O binaries\n- **Ghidra**: NSA's reverse engineering framework for static ARM64 binary analysis of iOS apps\n\n## Common Pitfalls\n\n- **FairPlay encryption**: Apps downloaded from the App Store are encrypted. You must decrypt before static analysis. Use frida-ios-dump on a jailbroken device.\n- **Swift-only classes**: Pure Swift classes without `@objc` annotation are not visible through `ObjC.classes`. Use `Module.enumerateExports()` instead.\n- **Stripped binaries**: Release builds strip debug symbols. Combine frida-trace with class-dump output for effective analysis.\n- **Anti-Frida measures**: Sophisticated apps check for Frida artifacts (frida-server process, Frida agent strings in memory, injected libraries in dyld). Use stealthy Frida builds or Frida Gadget injection.\n",{"name":5,"tags":25,"author":32,"domain":33,"source":34,"license":15,"version":35,"nist_csf":36,"subdomain":26,"description":41,"mitre_attack":42,"source_commit":48},[26,27,28,29,30,31],"mobile-security","ios","frida","reverse-engineering","owasp-mobile","penetration-testing","mahipal","cybersecurity","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills","1.0.0",[37,38,39,40],"PR.PS-01","PR.AA-05","ID.RA-01","DE.CM-09","Reverse engineers iOS applications using Frida dynamic instrumentation to understand internal logic, extract encryption keys, bypass security controls, and discover hidden functionality without source code access. Use when performing authorized iOS penetration testing, analyzing proprietary protocols, understanding obfuscated logic, or extracting runtime secrets from iOS binaries. Activates for requests involving iOS reverse engineering, Frida iOS hooking, Objective-C\u002FSwift method tracing, or iOS binary analysis.\n",[43,44,45,46,47],"T1059","T1056","T1036","T1078","T1573","04450304b12645cb2b974ab96d28c0664758a88d","main","481dcd7dd2e288b9d627a2bd017db70e64e6c6fa","core\u002Fskills\u002Freverse-engineering-ios-app-with-frida",1,"https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI","https:\u002F\u002Fyana.vutam.link\u002F","https:\u002F\u002Fgithub.com\u002FHoronomos-laps","https:\u002F\u002Fyana.vutam.link","An open-source governed runtime & execution environment for multi-agent AI systems.","2026-11-11 23:56:26",{"source":8,"skillName":5,"commands":60,"prompt":70,"zipAvailable":71},[61,64,67],{"tool":62,"command":63},"npx","npx skills add Horonomos-laps\u002FYana-AI --skill reverse-engineering-ios-app-with-frida",{"tool":65,"command":66},"bunx","bunx skills add Horonomos-laps\u002FYana-AI --skill reverse-engineering-ios-app-with-frida",{"tool":68,"command":69},"pnpm","pnpm dlx skills add Horonomos-laps\u002FYana-AI --skill reverse-engineering-ios-app-with-frida","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Freverse-engineering-ios-app-with-frida\u002FSKILL.md",true,[73,79,83,89,93,97,103],{"path":74,"resourceType":75,"resourceTypeDesc":76,"sizeBytes":77,"sourceHtmlUrl":78},"assets\u002Ftemplate.md","ASSET","资产文件",1116,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Freverse-engineering-ios-app-with-frida\u002Fassets\u002Ftemplate.md",{"path":80,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":82,"sourceHtmlUrl":16},"LICENSE","许可证",11255,{"path":84,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":87,"sourceHtmlUrl":88},"references\u002Fapi-reference.md","REFERENCE","参考文档",1750,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Freverse-engineering-ios-app-with-frida\u002Freferences\u002Fapi-reference.md",{"path":90,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":91,"sourceHtmlUrl":92},"references\u002Fstandards.md",1432,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Freverse-engineering-ios-app-with-frida\u002Freferences\u002Fstandards.md",{"path":94,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":95,"sourceHtmlUrl":96},"references\u002Fworkflows.md",1724,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Freverse-engineering-ios-app-with-frida\u002Freferences\u002Fworkflows.md",{"path":98,"resourceType":99,"resourceTypeDesc":100,"sizeBytes":101,"sourceHtmlUrl":102},"scripts\u002Fagent.py","SCRIPT","脚本",6049,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Freverse-engineering-ios-app-with-frida\u002Fscripts\u002Fagent.py",{"path":104,"resourceType":99,"resourceTypeDesc":100,"sizeBytes":105,"sourceHtmlUrl":106},"scripts\u002Fprocess.py",4141,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Freverse-engineering-ios-app-with-frida\u002Fscripts\u002Fprocess.py",[108,116,123,131,139,147],{"skillNo":109,"name":110,"nameZh":6,"description":111,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":112,"licenseFileUrl":6,"sourceHtmlUrl":113,"categories":114,"keywords":115,"publishedAt":20},"01M735GKET5YVYKAY62W2P5YXB","openai--sentry--sentry","Use when the user asks to inspect Sentry issues or events, summarize recent production errors, or pull basic Sentry health data via the Sentry API; perform read-only queries with the bundled script and require `SENTRY_AUTH_TOKEN`.","MIT","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fopenai--sentry--sentry\u002FSKILL.md",[],[],{"skillNo":117,"name":118,"nameZh":6,"description":119,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":120,"categories":121,"keywords":122,"publishedAt":20},"01M73DCAP83T17HY7SMGK7MGFE","ito-basket-compare","Compare Itô prediction-market baskets against a user's knowledge base, portfolio notes, financial context, watchlist, or research thesis. Use for read-only basket comparison and gap analysis without investment advice or live trading.","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fito-basket-compare\u002FSKILL.md",[],[],{"skillNo":124,"name":125,"nameZh":6,"description":126,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":127,"sourceHtmlUrl":128,"categories":129,"keywords":130,"publishedAt":20},"01M734CYEMZFDR3KH6SW0JP8TD","implementing-network-traffic-baselining","Build network traffic baselines from NetFlow\u002FIPFIX data using Python pandas for statistical analysis, z-score anomaly detection, and hourly\u002Fdaily traffic pattern profiling","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-network-traffic-baselining\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-network-traffic-baselining\u002FSKILL.md",[],[],{"skillNo":132,"name":133,"nameZh":6,"description":134,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":135,"sourceHtmlUrl":136,"categories":137,"keywords":138,"publishedAt":20},"01M73ASZ6NJRJM44Z2P84NGQ3Q","detecting-evasion-techniques-in-endpoint-logs","Detects defense evasion techniques used by adversaries in endpoint logs including log tampering, timestomping, process injection, and security tool disabling. Use when investigating suspicious endpoint behavior, building detection rules for evasion tactics, or conducting threat hunting for stealthy adversary activity. Activates for requests involving evasion detection, defense evasion analysis, log tampering detection, or MITRE ATT&CK TA0005.","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fdetecting-evasion-techniques-in-endpoint-logs\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fdetecting-evasion-techniques-in-endpoint-logs\u002FSKILL.md",[],[],{"skillNo":140,"name":141,"nameZh":6,"description":142,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":143,"sourceHtmlUrl":144,"categories":145,"keywords":146,"publishedAt":20},"01M734AFNXD06Z78QRK0VKGT7Q","implementing-microsegmentation-with-guardicore","Implementing microsegmentation using Akamai Guardicore Segmentation to map application dependencies, create granular network policies, visualize east-west traffic flows, and enforce least-privilege communication between workloads across data centers and cloud.","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-microsegmentation-with-guardicore\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-microsegmentation-with-guardicore\u002FSKILL.md",[],[],{"skillNo":148,"name":149,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":150,"categories":151,"keywords":152,"publishedAt":20},"01M736TK27QMCXK0DVCH25SJN5","ramdisk-tmpfs-patterns","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Framdisk-tmpfs-patterns\u002FSKILL.md",[],[]]