Anti Crack

Anti-crack audit for client software. 防破解安全审计——保护客户端软件不被盗版、逆向、破解。覆盖 Electron/iOS/Android/Flutter/Go/Rust/C++/.NET(WPF/WinForms)/CLI/游戏等客户端平台，含联网通信和服务端配合防御，7大通用维度 + 10大平台专项。

8 starsMobile Development

Install

skills CLI (Claude Code, Cursor, Codex and more)

npx skills add sundaygod1207/anti-crack-skill --skill anti-crack

Manual install

git clone --depth 1 https://github.com/sundaygod1207/anti-crack-skill.git /tmp/anti-crack-skill
mkdir -p ~/.claude/skills
cp -r /tmp/anti-crack-skill/. ~/.claude/skills/anti-crack

Personal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.

From the SKILL.md

# 软件安全审计 Skill

对客户端软件（Windows/Mac/Linux 桌面、iOS/Android 移动端、跨平台 App、编译型可执行程序、CLI 工具、游戏）做全面的防破解安全审计。目标是保护基于激活码/订阅/内购的客户端商业模式不被破解和盗版。

## 使用方式

用户说"检查安全""安全审计""查漏洞""防破解""加固"等关键词时调用本 Skill。

## 审计流程

⚠️ **审计前必须先做回归验证（见维度〇）**，避免之前修过的漏洞被新代码重新引入。

对每个文件逐行读，以攻击者视角完成以下 **7+9 个维度** 的检查：

1. **通用维度（所有平台）**：激活码验证 → 本地存储 → 机器指纹 → 服务端验证 → DevTools/调试 → 后端脚本保护 → 离线攻击
2. **平台专项**：根据软件类型对应检查（Electron / iOS / Android / Flutter / Go-Rust-C++ / CLI / Games / 联网通信 / 服务端配合）

---

## 〇、修复后回归验证（每次审计前必做）

修完漏洞后重新审计时，**先验证**上次报告中的 🔴 和 🟡 项是否仍然修复到位。常见回归模式：

| 回归类型 | 例子 | 检查方式 |
|----------|------|----------|
| 函数名写错 | 上次创建了 `verifyLicense`，新代码调用了 `verifyLicenseOnline`（未定义） | grep 所有新增函数调用，确认被调用方存在 |
| 属性名写错 | config 存为 `licenseCode`，代码访问 `config.license.code` | 对比 save 和 load 的 key 名是否一致 |
| 路径残留 | 上次改了 `<script src="app.js">`，新 HTML 又写回 `js/app.js` | 提取构建产物，grep 确认旧路径不存在 |
| 令牌绕过复活 | 上次删了 `--test-key` 的 `if not args.test_key`，新代码又加回去 | grep 搜索所有跳过验证的条件分支 |
| 环境变量 vs CLI | 上次把 `--license-token` 改为 `MY_APP_TOKEN` 环境变量，Python 端还在读 `args.license_token` | 对比 JS 传递方式和 Python 接收方式 |

**关键原则**：修复后不光看改了的那几行——要从构建产物中验证最终效果。

---

## 一、激活码验证链路

### 检查清单

| # | 检查项 | 看什么 |
|---|--------|--------|
| 1.1 | 开发模式放行 | 有没有 `if (!electronAPI)` / `isDev` / `DEBUG` 等无条件放行逻辑？必须删除 |
| 1.2 | 本地优先验证 | 是否先读本地缓存就放行，再后台验证？必须先调服务端 |
| 1.3 | Boolean 门控 | 有没有 `licenseValid = true` 这种单点判断？攻击者改一行就过 |
| 1.4 | 关键操作验证 | 每次执行核心功能（生成/导出/计算）前是否重新验证？不是只在启动时验一次 |

### 标准做法

Read the full skill on GitHub

Details

Skill name: anti-crack
Repository: sundaygod1207/anti-crack-skill
Repo updated: 31 July 2026

FAQ

What does the Anti Crack skill do?

How do I install the Anti Crack skill?

skills CLI (Claude Code, Cursor, Codex and more): npx skills add sundaygod1207/anti-crack-skill --skill anti-crack. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.

Is Anti Crack popular?

It lives in sundaygod1207/anti-crack-skill, which has 8 GitHub stars and 0 forks.

Related skills

Store Ready

Medlzd/store-ready

Audits a mobile app before App Store or Google Play submission. Use when the user mentions publishing or submitting an app, App Store Connect, Play Console, TestFlight, rejection, metadata, signing.

Mobile Development

Android Performance Skill

avinashbest/android-performance-skill

Expert-level Android performance optimization skill. Use this skill whenever the user asks about anything related to Android app performance — including but not limited to: ANRs (Application Not Responding errors), crashes (NullPointerException, OOM, fatal exceptions), app startup time (cold start, warm start, hot start), UI jank or frame drops, memory leaks, battery drain, slow network calls, database/SQLite performance, overdraw, ProGuard/R8, Doze mode, WorkManager, RecyclerView performance, Bitmap/image loading, threading/coroutines, profiling with Android Studio, Perfetto, or Systrace. Tri

Mobile Development

Mobile Design

RubenGlez/mobile-design

Designs, implements, and reviews professional mobile UI for React Native and Expo, with platform-aware design and review guidance for iOS and Android. Use when the task involves mobile screens, components, navigation, visual direction, design systems, accessibility, gestures, haptics, animations, typography, color, dark mode, safe areas, adaptive windows, localization, platform conventions, App Store or Play-quality polish, iOS HIG, Material Design, Expo Router, React Navigation, Reanimated, Gesture Handler, or mobile UX critique.

Mobile Development

IOS Trace

kmgcc/iOS-Trace

Agent-native runbook for evidence-based profiling and optimization of native iOS and iPadOS apps with xctrace and Xcode Instruments on physical devices or simulators. Use for CPU or battery use, memory growth or Jetsam, UI hitches, slow launch, concurrency stalls, audio glitches, or network activity. Choose instruments and workload reproduction to fit the issue; bundled scripts are optional helpers.

Mobile Development

Mimic

khimaros/mimic

Drive an android device from a shell with the `mimic` cli -- read the on-screen accessibility tree (filtered/queried on-device to stay small) and tap, swipe, click, type, scroll, and navigate. Use for ui automation on a connected/termux android device. Covers setup, every subcommand, and how to keep agent context small.

Mobile Development

Apple Liquid Glass

xenitV1/liquid-glass-skill

Apple's Liquid Glass design language (iOS 26 / macOS 26 HIG) made buildable on any platform: the content/chrome two-layer model, regular vs clear glass, real refraction (content bending at the rim), the rim light, type scales, system colours, component shapes, and Reduce Motion/Transparency/Increase Contrast fallbacks. Ships a CSS token file and a refraction script for the web, plus routes for SwiftUI/UIKit, Android Compose (Haze), Flutter, Electron, Tauri, Windows and Linux. Use when building or reviewing any UI that should look Apple-made or "liquid glass": "iOS style", "macOS style", "Liqui

Mobile Development

Browse the most popular Claude skills, all mobile development skills, or write your own with the skills generator.