Capacitor iOS Security Hardening

Audit the security-relevant Xcode build settings of a Capacitor app and its native plugins, then enable them in stages the user approves. This skill changes build settings and entitlements only. It never touches web code, ATS, signing, or secrets.

When to Use

TRIGGER when:

• The user wants to audit or harden the iOS build configuration of a Capacitor app
• The user asks about Enhanced Security, ENABLE_ENHANCED_SECURITY, hardened-process entitlements, pointer authentication, arm64e, or memory tagging
• After enabling Enhanced Security, the link step fails with errors that mention arm64e
• A plugin author wants stricter warnings or static analysis for plugin Swift/ObjC/C code
• The user wants "Build and Analyze" / xcodebuild analyze in CI

Do not use:

• ATS, TLS pinning, signing, secrets, WebView config, Capsec scans: capacitor-security
• App Store privacy manifest and review checklist: capacitor-apple-review-preflight
• The AppDelegate to SceneDelegate migration: capacitor-uiscene-migration
• Android R8, network security config: capacitor-security