philo-groves avatar

apple-target-flags

v0.1.0

by philo-groves · author: Beale

Evidence guidance for selecting, capturing, and validating Apple Security Bounty Target Flags without overstating the demonstrated primitive.

What apple-target-flags does, in the publisher's words

apple-target-flags is a portable Agent Plugin that teaches research agents how Apple Security Bounty Target Flags map to exploit primitives and what evidence confirms each capture.

The plugin covers userspace and kernel commpage flags for register control, arbitrary read/write, and code execution, plus the TCC integrity flag. It also defines evidence boundaries for same-boot correlation, UID-0 userspace execution, kernel panic analysis, negative results, and claims that exceed the captured primitive.

The skill follows Apple's current public guidance at https://security.apple.com/bounty/target-flags/. Agents must recheck that page and the applicable bounty category before preparing a report because eligibility requirements can change.

From the project README, punctuation lightly normalized · Open the README on GitHub

Skills
1
MCP servers
0
Stars
3
License
n/a
Repo created
2026-08-28
Last pushed
2026-10-20
Publisher type
User
Version
0.1.0

Links

Skills · 1

apple-target-flags
Select, capture, and assess Apple Security Bounty Target Flags for userspace, kernel, privilege-escalation, or TCC findings. Apply when planning an Apple exploit proof, interpreting a crash or panic as a flag capture, checking report readiness, or deciding exactly which primitive the evidence confi…

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.

Category

Security & Compliance. Assigned by this directory. Agent Plugins 1.0.0 has no category field, so no manifest declares one.

Keywords

apple-security · apple-security-bounty · exploit-evidence · target-flags

Related by publisher and keywords

  • Realistic Apple security-research environments using Tart macOS guests, physical iPhones, and darwin-vm low-level Darwin guests.

  • Prefer a Windows Insider Preview Canary Hyper-V guest for Windows validation. Check guest build freshness against current Microsoft release guidance on each session's first VM touch.

  • paperclippaperclipai

    Review your team, delegate work and retrieve durable results in Paperclip.

  • World Monitor agent plugin: live global-intelligence MCP servers plus task-focused agent skills for country risk, conflict, markets, chokepoints, energy, climate, and related situational awareness.

  • hyperframesheygen-com

    HyperFrames by HeyGen. Write HTML, render video. Compositions, GSAP and runtime adapter animations, captions, voiceovers, audio-reactive visuals, and website capture for HyperFrames.

  • mem0mem0ai

    Cross-session memory and token savings for coding agents.

Add the verified badge to your README[![Verified by AgentPluginsDirectory.com against Schema 1.0.0](https://agentpluginsdirectory.com/badge.svg)](https://agentpluginsdirectory.com/plugins/apple-target-flags)

✓ Verified . We fetched the manifest from GitHub and checked it against the official Agent Plugins 1.0.0 schema at agent-plugins.org.