ios-redteam-pipeline

When to use this skill

Trigger when:

• Recon surfaces 1+ apps under the target's Apple Developer / App Store publisher page
• A TestFlight public link or enterprise/ad-hoc .ipa/manifest.plist (OTA install) is found
• Customer-facing app, dealer/partner portal, or employee mobile companion app ships on iOS
• Bug bounty program lists iOS in scope
• apk-redteam-pipeline already found Android endpoints/secrets — the iOS build often ships a different backend version worth diffing (see hunt-shadow-api)

DO NOT use for:

• Android-only targets — that's apk-redteam-pipeline
• React Native / Flutter apps already fully covered by JS-bundle analysis on the web side
• Server-side only assessments with no mobile client in scope

Stage 0 — Inventory all org-owned iOS apps