apple-secure-coding

name	apple-secure-coding
description	Secure coding and security review for Apple platforms: threat modeling (STRIDE, attacker profiles), Keychain and Secure Enclave storage, CryptoKit cryptography, network security (ATS, certificate pinning, TLS), input validation (deep links, URL schemes, WebView hardening), jailbreak/integrity checks, and security code-review methodology. Use when writing or reviewing security-sensitive code (auth, storage, crypto, network handlers, deep links). For Xcode build-setting hardening (Enhanced Security, bounds safety) use audit-xcode-security-settings.
allowed-tools	["Read","Glob","Grep"]

Apple Secure Coding

Security knowledge for Apple-platform code. Load references/_guide.md first, then specific references as the review demands.

References

Load: references/_guide.md

Topic	Reference
STRIDE analysis, attacker profiles	references/threat-modeling.md
Keychain, Secure Enclave, file protection	references/secure-storage.md
CryptoKit, key generation	references/cryptography.md
ATS, cert pinning, TLS	references/network-security.md
Deep links, WebView hardening	references/input-validation.md
Review checklists, methodology	references/code-review.md
Jailbreak detection, integrity	references/integrity-checks.md

Quick Checklist (Security-Sensitive Code)

• No hardcoded secrets
• All external input validated with strict allowlists
• Keychain with strongest applicable accessibility class
• Correct crypto (no ECB, no MD5/SHA1 for security, unique nonces)
• No unjustified ATS exceptions
• Logging sanitized — never log secrets

Related Skills

Need	Skill
Primary-source Apple security docs lookup	apple-docs
Xcode hardening build settings, Enhanced Security entitlement	audit-xcode-security-settings
C bounds-safety annotations (-fbounds-safety)	c-bounds-safety
Language-level safety (typed errors, value types)	swift
Security-focused execution contract	planner (security-audit template)