skills.rest
dpearson2699
dpearson2699COMMUNITY
Explore all skills by this author →
GitHub

device-integrity

Validate device legitimacy and app integrity with Apple's DeviceCheck and App Attest frameworks.

981|50|Updated Mar 3, 2026
Search Tags:#app security#ios security#device verification#app attest#devicecheck#secure enclave
One-click install
npx skills add https://github.com/dpearson2699/swift-ios-skills --skill device-integrity-dpearson2699
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: device-integrity
Source: https://github.com/dpearson2699/swift-ios-skills/tree/main/skills/device-integrity
Command: npx skills add https://github.com/dpearson2699/swift-ios-skills --skill device-integrity-dpearson2699

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps ensure that your application's requests originate from genuine Apple devices running an unmodified version of your app, crucial for fraud prevention and security.

Core Features & Use Cases

  • DeviceCheck (DCDevice): Utilizes per-device bits for flagging specific device states (e.g., promotional offer claims, fraud flags).
  • App Attest (DCAppAttestService): Employs Secure Enclave keys to cryptographically prove app legitimacy on each request, protecting sensitive API endpoints.
  • Use Case: Implement robust fraud prevention by verifying that a user claiming a limited-time offer is indeed on a legitimate device running your authentic app.

Quick Start

Use the device-integrity skill to generate an App Attest assertion for a sensitive API request.

Frequently Asked Questions about device-integrity

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify iOS app authenticity using App Attest?▼

App Attest verifies iOS app authenticity by generating Secure Enclave cryptographic keys, creating attestations to prove key validity, and issuing assertions for sensitive API requests to confirm app legitimacy.

What is DeviceCheck used for in iOS app security?▼

DeviceCheck uses per-device bits to track specific device states, allowing you to flag devices for fraud prevention or track promotional offer claims across app reinstalls.

How do I implement fraud prevention for limited-time promotional offers on iOS?▼

Implement fraud prevention by combining DeviceCheck to flag devices that already claimed offers with App Attest to cryptographically verify requests originate from your unmodified app.

Does App Attest require Secure Enclave for cryptographic proof?▼

Yes, App Attest relies on Secure Enclave keys to generate cryptographic proof of app legitimacy, ensuring that sensitive API endpoints cannot be accessed by compromised or modified applications.

What is the difference between DeviceCheck and App Attest for device verification?▼

DeviceCheck tracks per-device states using persistent bits, while App Attest generates per-request cryptographic assertions via Secure Enclave to validate app integrity on Apple servers.

Related Skills

Explore More Software Engineering Skills→
asnar00asnar00
1

eos-stop-app

Stop an Android app on a connected device via adb shell am force-stop.

Community
Intermediate
omarshahineomarshahine
155

device-integrity

Verify Apple device legitimacy and app integrity using DeviceCheck and App Attest.

Community
Advanced
alexfazioalexfazio
159

cc-trace

Intercept and inspect Claude Code API traffic using mitmproxy.

Community
Advanced
arimunandararimunandar
1

iOS Security

Document iOS security best practices for Keychain, biometrics, and App Attest.

Community
Advanced