IOS Protocol Capture

Use when the user wants to reverse-engineer how an iOS app talks to an external device — BLE pairing flow, WiFi commands, private protocols, the actual bytes on the wire. Captures iPhone HCI traffic (decrypted) via `idevicebtlogger` and WiFi traffic via `rvictl` + `tcpdump`, parses with `tshark`, decodes PTP-IP and Sony private opcodes. Trigger whenever the user mentions sniffing/capturing/decoding traffic between an iPhone and a Bluetooth or WiFi device (cameras, smart locks, IoT, fitness equipment, car infotainment, smart home), debugging a private protocol, looking at HCI/ATT/SMP logs, comp

5 starsMobile Development

Install

skills CLI (Claude Code, Cursor, Codex and more)

npx skills add profitpioneer/iphone-protocol-sniffer --skill ios-protocol-capture

Manual install

git clone --depth 1 https://github.com/profitpioneer/iphone-protocol-sniffer.git /tmp/iphone-protocol-sniffer
mkdir -p ~/.claude/skills
cp -r /tmp/iphone-protocol-sniffer/. ~/.claude/skills/ios-protocol-capture

Personal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.

From the SKILL.md

# iOS Protocol Capture & Decode

Reverse-engineering how an iOS app communicates with hardware doesn't need expensive hardware sniffers. The iPhone exposes its full Bluetooth HCI stream and full WiFi packet stream over USB, and both streams are **already decrypted** (because iOS is the endpoint of the BLE encryption / WPA2 association). This skill turns that into a reliable workflow.

The skill is structured around three jobs:

1. **Capture** — get clean BLE and/or WiFi traces with proper time alignment
2. **Decode** — turn raw pcap into a human-readable protocol timeline (especially for PTP-IP and Sony cameras, but the framework generalizes)
3. **Sanitize** — strip secrets (WiFi credentials, device IDs, third-party tokens) before sharing

## When to use which capture mode

| Scenario | Mode | Why |
|---------|------|-----|
| Reverse-engineering BLE pairing / GATT writes / SMP | BLE-only | Smaller files, faster iteration. Run `scripts/capture-ble.sh` |
| App connects to device over WiFi (HTTP, PTP-IP, custom TCP) | WiFi-only | Run `scripts/capture-wifi.sh` |
| Both — pairing handoff, BLE-triggered WiFi flows, full app↔device session | **Both, time-aligned** | Run `scripts/capture-both.sh`. Most reverse-engineering tasks land here |

Read each script before running so you understand what it does — they're short and self-contained.

## Setup (run once)

Run `scripts/check-tools.sh`. It verifies and offers to install:

Read the full skill on GitHub

Details

Skill name: ios-protocol-capture
Repository: profitpioneer/iphone-protocol-sniffer
License: MIT
Repo updated: 3 May 2026

FAQ

What does the IOS Protocol Capture skill do?

How do I install the IOS Protocol Capture skill?

skills CLI (Claude Code, Cursor, Codex and more): npx skills add profitpioneer/iphone-protocol-sniffer --skill ios-protocol-capture. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.

Is IOS Protocol Capture popular?

It lives in profitpioneer/iphone-protocol-sniffer, which has 5 GitHub stars and 0 forks.

Related skills

Clousd

Clousd-Android/clousd-sdk

Drive real Android cloud phones on Clousd - check the account, list and start phones, give one or many phones a task in plain words and follow it to the answer, use saved logins without seeing passwords, schedule repeating tasks, or drive the screen step by step. Use when the user mentions Clousd, cloud phones, testing or automating Android apps on remote phones, or an agent that needs a phone.

Mobile DevelopmentIn 1 list

Android Kmp Development

ronyaburaihan/android-kmp-development

Android and Kotlin Multiplatform app engineering. Use when developing, debugging, reviewing, testing, refactoring, upgrading, or releasing an Android, Jetpack Compose, Compose Multiplatform, or KMP mobile app — including Koin, Ktor client, Room, DataStore, coroutines/Flow, iOS interop, and Play/App Store release work. Not for server-side Kotlin (Ktor server, Spring) or Kotlin that targets no Android or KMP app.

Mobile Development

iOS Simulator

Interact with iOS Simulator for app testing and development. Build and test iOS applications through simulator automation.

Mobile Development

Apple Hig

ebuntario/apple-hig

Design and build interfaces that follow Apple's Human Interface Guidelines for iOS, iPadOS, macOS, watchOS, tvOS, and visionOS. TRIGGER on: "iOS app", "iPadOS", "macOS", "watchOS", "tvOS", "visionOS", "SwiftUI", "UIKit", "AppKit", "HIG", "Apple design", "iPhone UI", "Mac app", "Apple Watch app", "Vision Pro", "SF Symbols", "Dynamic Type", "Dark Mode", "Liquid Glass", or any request to build, mock, or review a user interface meant to ship on an Apple platform — even when "HIG" is not said. Also trigger on web or Figma mockups that the user explicitly wants to feel native to Apple. Always run Ph

Mobile Development

Iphone Duo Design

Belweave/iphone-duo-design

Design, build, lint and review iOS apps for iPhone Duo, Apple's foldable iPhone. Use when adapting SwiftUI or UIKit layouts for the outer and inner displays, size classes, vertical (side) bars, the fold and reserved regions, split views, ArrangementView, sheets, Split View multitasking, games, the hinge, camera direction, multiple windows, Live Activities, Liquid Glass on iOS 27, App Store screenshots and the optimized-for-iPhone-Duo badge, or when reviewing or testing an app on iPhone Duo.

Mobile Development

Mimic

khimaros/mimic

Drive an android device from a shell with the `mimic` cli -- read the on-screen accessibility tree (filtered/queried on-device to stay small) and tap, swipe, click, type, scroll, and navigate. Use for ui automation on a connected/termux android device. Covers setup, every subcommand, and how to keep agent context small.

Mobile Development

Browse the most popular Claude skills, all mobile development skills, or write your own with the skills generator.