Is the IPSW Apple Reverse Engineering Toolkit skill free?

Yes. The skill itself is free from blacktop/ipsw-skill. SkillProof publishes the install command and an independent test verdict at no cost.

What is the IPSW Apple Reverse Engineering Toolkit SkillProof Score?

8.8/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 8/10, docs & honesty 4/5.

How do I install IPSW Apple Reverse Engineering Toolkit?

Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.

Can I use IPSW Apple Reverse Engineering Toolkit with Cursor, Copilot, Gemini CLI, Codex or other AI tools?

The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.

IPSW Apple Reverse Engineering Toolkit

Drive the ipsw CLI to reverse-engineer iOS/macOS: DSC, kernel, entitlements, sandbox

by blacktop · blacktop/ipsw-skill

Tested · Works

Install — copy the command Download source ↗

Test report

Verdict: Tested · Works
Score: 8.8/10
Tested: Jul 17, 2026
Environment: Claude Code 2.x (agent harness)
Upstream re-checked: Aug 7, 2026 · b25dd30

Installed the real ipsw CLI (brew, v3.1.704) and ran the skill's own commands against this Mac's live dyld_shared_cache: symaddr resolved _objc_msgSend to 0x180071c00, a2s reversed it back, and class-dump printed the full SecKeyProxy interface — all verbatim from the skill. Without the skill an agent would fumble the macOS-14 cache path, the symbol-cache priming step, and the exact subcommand names, so it clearly beats the baseline. One inaccuracy: the disass-by-symbol example passes --image, but the CLI actually wants --symbol-image for that filter.

Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works

Installs cleanly 5/5
Triggers reliably 5/5
Output vs. baseline 8/10
Docs & honesty 4/5

What IPSW Apple Reverse Engineering Toolkit does

Command reference for the ipsw CLI covering dyld_shared_cache disassembly, ObjC/Swift class-dump, kernelcache/KEXT extraction, entitlement databases, sandbox-profile decompilation, firmware diffing, and crash symbolication. Triggers on iOS/macOS internals, dyld_shared_cache, KEXT diffing, entitlement lookup, or Apple-platform vulnerability research.

How to install IPSW Apple Reverse Engineering Toolkit

git clone https://github.com/blacktop/ipsw-skill
mkdir -p ~/.claude/skills
cd ipsw-skill && cp -r ipsw ~/.claude/skills/ipsw

Skills live in ~/.claude/skills/ (global) or .claude/skills/ (per-project). Restart Claude Code after installing.

Commands — how to trigger IPSW Apple Reverse Engineering Toolkit

/ipsw Drive the ipsw CLI to reverse-engineer iOS/macOS: DSC, kernel, entitlements, sandbox

It also activates on plain-language prompts like these:

Resolve the address of objc_msgSend in the shared cache
Class-dump the SecKeyProxy interface from Security.framework
Diff two dyld_shared_cache versions and find what changed

Frequently asked questions

Is the IPSW Apple Reverse Engineering Toolkit skill free?: Yes. The skill itself is free from blacktop/ipsw-skill. SkillProof publishes the install command and an independent test verdict at no cost.
Does IPSW Apple Reverse Engineering Toolkit work with Claude Code?: We tested it with Claude Code 2.x (agent harness) on Jul 17, 2026. Verdict: Tested · Works. Installed the real ipsw CLI (brew, v3.1.704) and ran the skill's own commands against this Mac's live dyld_shared_cache: symaddr resolved _objc_msgSend to 0x180071c00, a2s reversed it back, and class-dump printed the full SecKeyProxy interface — all verbatim from the skill. Without the skill an agent would fumble the macOS-14 cache path, the symbol-cache priming step, and the exact subcommand names, so it clearly beats the baseline. One inaccuracy: the disass-by-symbol example passes --image, but the CLI actually wants --symbol-image for that filter.
What is the IPSW Apple Reverse Engineering Toolkit SkillProof Score?: 8.8/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 8/10, docs & honesty 4/5.
How do I install IPSW Apple Reverse Engineering Toolkit?: Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
Can I use IPSW Apple Reverse Engineering Toolkit with Cursor, Copilot, Gemini CLI, Codex or other AI tools?: The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.