Skill UI

A comprehensive solution designed to monitor changes (add, modify, delete) within Apple Notes on macOS. Since Notes lacks a native webhook or event streaming API, this skill provides three robust methods—JXA Polling, FSEvents monitoring, and Shortcuts automation—allowing developers to build reliable, near real-time event systems for integrating Notes data into automated workflows.

XcodeBuildMCP is a unified skill set designed to streamline the entire mobile and desktop development lifecycle. It replaces raw command-line tools like xcodebuild, xcrun, and simctl, providing structured workflows for iOS, macOS, watchOS, tvOS, and visionOS. Capabilities include project discovery, managing simulator and physical device workflows, advanced UI automation (gestures, view inspection), robust logging, and deep debugging using LLDB. It simplifies complex build, test, and run operations across multiple platforms.

The official skill for the XcodeBuildMCP CLI, providing a unified interface for complex Apple development tasks. It streamlines build, test, run, debug, and UI automation across iOS, macOS, watchOS, tvOS, and visionOS. Use this tool to simplify multi-stage workflows and manage project lifecycles without relying on raw, complex xcodebuild commands.

A comprehensive playbook detailing advanced macOS process injection techniques. It covers exploiting system mechanisms such as DYLD_INSERT_LIBRARIES, dylib hijacking (weak/rpath), XPC abuse, and Mach port manipulation. Essential for security researchers and penetration testers aiming to execute code in target processes.

A comprehensive playbook detailing advanced techniques for bypassing core macOS security features, including TCC, Gatekeeper, SIP, and sandbox restrictions. This guide is essential for authorized red team operations and penetration testing targeting macOS endpoints, covering methods like direct database manipulation, extended attribute removal, and privilege escalation paths.

Flox is a declarative, Nix-based environment manager designed to create perfectly reproducible development environments. It handles system-level dependencies (like compilers, databases, and native libraries) and ensures that complex toolchains across multiple languages (Python, Node.js, Go, etc.) function identically across macOS and Linux. Ideal for solving 'works on my machine' issues and onboarding new team members instantly.

This skill runs the Bumblebee scanner on macOS/Linux to perform read-only inventory and exposure checks. It detects compromised packages, developer tools, and host configurations against known security advisories. It is primarily used for supply-chain incident response and vulnerability assessment, providing developers with a clear picture of local system exposure.