ios▌

Native iOS interface design aligned with Apple's Human Interface Guidelines and platform conventions. \n \n Covers eight core design areas: layout and safe areas, typography with Dynamic Type, semantic colors and Dark Mode, native navigation patterns, system controls, accessibility (VoiceOver, contrast, touch targets), SF Symbols, and standard gestures with haptic feedback \n Includes scoring framework (0-10) for auditing iOS interface adherence, common mistakes table, and quick diagnostic check

Tests and exploits deep link (URL scheme and App Link) vulnerabilities in Android and iOS mobile applications to identify unauthorized access, data injection, intent hijacking, and redirect manipulation. Use when assessing mobile app attack surface through custom URI schemes, Android App Links, iOS Universal Links, or intent-based navigation. Activates for requests involving deep link security testing, URL scheme exploitation, mobile intent abuse, or link hijacking.

Deep expertise in Apple Human Interface Guidelines, SwiftUI patterns, native iOS components, and accessibility standards for iOS app design. \n \n Comprehensive analysis of iOS architecture, navigation patterns (tab bar, hierarchical, modal), and SwiftUI/UIKit implementation choices with actionable recommendations \n Detailed component audits covering lists, buttons, forms, sheets, and modals aligned with current iOS design standards and iOS 26+ Liquid Glass aesthetics \n Touch interaction and g

$22

You MUST use this skill for ANY computer vision work using the Vision framework.

You MUST use this skill for ANY on-device machine learning or speech-to-text work.

Intercepts and analyzes HTTP/HTTPS traffic from mobile applications using Burp Suite proxy to identify insecure API communications, authentication flaws, data leakage, and server-side vulnerabilities. Use when performing mobile application penetration testing, assessing API security, or evaluating client-server communication patterns. Activates for requests involving mobile traffic interception, Burp Suite mobile proxy, API security testing, or mobile HTTPS analysis.

Bypasses SSL/TLS certificate pinning implementations in Android and iOS applications to enable traffic interception during authorized security assessments. Covers OkHttp, TrustManager, NSURLSession, and third-party pinning library bypass techniques using Frida, Objection, and custom scripts. Activates for requests involving certificate pinning bypass, SSL pinning defeat, mobile TLS interception, or proxy-resistant app testing.

Tests authentication and authorization mechanisms in mobile application APIs to identify broken authentication, insecure token management, session fixation, privilege escalation, and IDOR vulnerabilities. Use when performing API security assessments against mobile app backends, testing JWT implementations, evaluating OAuth flows, or assessing session management. Activates for requests involving mobile API auth testing, token security assessment, OAuth mobile flow testing, or API authorization bypass.

Identifies and exploits insecure local data storage vulnerabilities in Android and iOS mobile applications including unencrypted databases, world-readable files, insecure SharedPreferences, plaintext credential storage, and improper keychain/keystore usage. Use when performing mobile penetration testing focused on OWASP M9 (Insecure Data Storage) or assessing compliance with MASVS-STORAGE requirements. Activates for requests involving mobile data storage security, local storage exploitation, SharedPreferences analysis, or mobile data leakage assessment.