ios-pentesting-tricks
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Utilizes a variety of command-line utilities for mobile device interaction and binary analysis, including ideviceinstaller, ios-deploy, otool, plutil, and sqlite3.
- [DYNAMIC_EXECUTION]: Features extensive Frida recipes and Objection command patterns for runtime application manipulation. These techniques include hooking Objective-C methods, swizzling implementations, and bypassing security controls such as jailbreak detection and SSL pinning.
- [DATA_EXFILTRATION]: Documents methods for extracting sensitive information from an iOS application's sandbox and keychain, targeting credentials, session cookies, and local data stores like NSUserDefaults and SQLite.
- [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: The skill processes external application metadata (Info.plist), binary headers, and database contents (SKILL.md, IOS_RUNTIME_TRICKS.md). 2. Boundary markers: The instructions do not define delimiters for the application data being analyzed. 3. Capability inventory: The agent is granted capabilities for shell command execution and runtime process hooking across all referenced scripts. 4. Sanitization: There is no evidence of sanitization or validation for the data ingested from the target applications.
Audit Metadata