Safer secret storage and encryption in Apple apps.
Guides implementation and review of secure storage, cryptography, and trust checks in iOS/macOS apps.
When to use it
Use for client-side Apple platform security work, including credential storage, biometrics, cryptography, certificate trust, migrations, and security reviews.
It changes how the agent reviews, implements, and migrates security code by requiring safe patterns, error handling, tests, and checklists.
What you provide
Routes Sign in with Apple, passkeys, OAuth UI flows, credential state, and sign-in UX to authentication; installation requirements are unstated.
Routes primitive CryptoKit syntax and examples to cryptokit when storage, key lifecycle, trust design, security review, and compliance are outside the task; installation requirements are unstated.
Routes DeviceCheck and App Attest attestation and assertion flows to device-integrity; installation requirements are unstated.
Routes URLSession, request pipelines, ATS configuration, retries, caching, reachability, and transport architecture to ios-networking; installation requirements are unstated.
No additional actions listed.