reverse-engineering-ios-app-with-frida

Warn

Audited by Socket on Sep 17, 2026

2 alerts found:

SecurityAnomaly
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent for iOS reverse engineering, but it equips an AI agent with offensive instrumentation, secret extraction, security-control bypass, root SSH access, and an unverifiable third-party dumping tool. This is not confirmed malware, yet it is a high-risk security skill whose capabilities exceed normal developer-assistance scope and could readily enable misuse.

Confidence: 90%Severity: 81%
AnomalyLOW
scripts/agent.py

The code is an incomplete Frida-based iOS security-testing utility. It contains dual-use capabilities for SSL-pinning bypass, Objective-C tracing, and jailbreak-detection observation, but no evident data exfiltration, persistence, credential theft, or destructive behavior. It has syntax errors and a missing method that prevent execution as supplied. The unescaped class_name interpolation is an injection risk in the generated Frida script, and use against applications or devices without authorization would be inappropriate.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Sep 17, 2026, 05:14 AM
Package URL
pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Freverse-engineering-ios-app-with-frida%2F@52f7733d0010cdf01bddc6dd7ba60a28da5756d1e1eba7b33cebd40f815a7d1a