The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: Automated scanners flagged a pattern where API results are piped to Python. Manual analysis confirms the command python3 -m json.tool is a built-in library used solely for formatting JSON output and does not execute remote code.\n- [EXTERNAL_DOWNLOADS]: The skill downloads application metadata from the official Apple iTunes Search and Lookup APIs (itunes.apple.com).\n- [EXTERNAL_DOWNLOADS]: The skill facilitates the acquisition of manifest files and application packages (IPAs) from user-specified target domains for security analysis.\n- [COMMAND_EXECUTION]: The skill utilizes several standard CLI tools for security research, including codesign, plutil, nm, strings, unzip, and ideviceinstaller. It also uses package managers pip and brew to install these dependencies.\n- [INDIRECT_PROMPT_INJECTION]: The skill establishes a pipeline for processing untrusted data from external iOS application artifacts.\n
Ingestion points: Target IPA binaries, manifest.plist files, and application Info.plist files.\n
Boundary markers: None; the instructions define a direct processing pipeline for the provided artifacts.\n
Capability inventory: File extraction, property list manipulation, binary symbol recovery, and runtime instrumentation via Frida and Objection.\n
Sanitization: None; the skill relies on the inherent security of the analysis tools employed to process target data.

ios-redteam-pipeline