reverse-engineering-ios-app-with-frida
Audited by Socket on Sep 17, 2026
2 alerts found:
SecurityAnomalySUSPICIOUS: the skill is internally coherent for iOS reverse engineering, but it equips an AI agent with offensive instrumentation, secret extraction, security-control bypass, root SSH access, and an unverifiable third-party dumping tool. This is not confirmed malware, yet it is a high-risk security skill whose capabilities exceed normal developer-assistance scope and could readily enable misuse.
The code is an incomplete Frida-based iOS security-testing utility. It contains dual-use capabilities for SSL-pinning bypass, Objective-C tracing, and jailbreak-detection observation, but no evident data exfiltration, persistence, credential theft, or destructive behavior. It has syntax errors and a missing method that prevent execution as supplied. The unescaped class_name interpolation is an injection risk in the generated Frida script, and use against applications or devices without authorization would be inappropriate.