---
title: "IGF (Grapefruit) CLI Skill - Air Market"
description: "When you are examining a mobile app while it is actually running, you need a way to reach into it. This is a command-line way into the Grapefruit instrumentation server: find devices, list apps, atta…"
canonical: "https://airmarket.ai/app/igf"
---

[Air Market](/) / [Security](/category/security) / IGF (Grapefruit) CLI Skill

Skill by [codecolorist](/@chichou)

# IGF (Grapefruit) CLI Skill

Poke at a running mobile app from your command line

## What this does

When you are examining a mobile app while it is actually running, you need a way to reach into it. This is a command-line way into the Grapefruit instrumentation server: find devices, list apps, attach hooks, read logs, walk the device file system, look at classes, dump memory. Reach for it when you are doing hands-on mobile app security work.

### Top 3 things it does for you

- List the devices and apps I can reach
- Run a hook against a live app
- Inspect classes or dump memory while an app runs

## Information

**IGF (Grapefruit) CLI Skill at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [codecolorist](/@chichou) |
| Category | [Security](/category/security) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Size | 10 KB |
| Licence | MIT |
| Repository | [ChiChou/grapefruit](https://github.com/ChiChou/grapefruit/tree/0bc6798ecf69559c58e842280c2b1c588c027c26/skills/igf) |
| GitHub stars | 1,378 (as of Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of IGF (Grapefruit) CLI Skill and flagged nothing. AIR's verdict: **safe**.

**What IGF (Grapefruit) CLI Skill's check was run against**

|  |  |
| --- | --- |
| Commit | 0bc6798ecf69559c58e842280c2b1c588c027c26 |
| Content hash | c38a5ca64494483b9cfb52e6622d7be893241c961b43813f859a1a44a61df562 |
| Files read | [Browse the files at this exact commit](https://github.com/ChiChou/grapefruit/blob/0bc6798ecf69559c58e842280c2b1c588c027c26/skills/igf/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for IGF (Grapefruit) CLI Skill](/security/igf)

## About IGF (Grapefruit) CLI Skill

This is a command-line interface to the igf (Grapefruit) dynamic instrumentation server, for working with apps while they run.

It covers enumerating Frida devices, listing apps, running hooks, querying logs, reaching device file systems, inspecting classes and dumping memory.

Use it for mobile app security analysis where you need to observe and interrogate a running app rather than a static copy of it.

## What's inside

- SKILL.md - instructions

## Questions

### Is IGF (Grapefruit) CLI Skill safe to install?

AIR scanned this exact version of IGF (Grapefruit) CLI Skill and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit 0bc6798ecf69, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/igf.

### How do I install IGF (Grapefruit) CLI Skill?

Open https://airmarket.ai/app/igf on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/ChiChou/grapefruit/tree/0bc6798ecf69559c58e842280c2b1c588c027c26/skills/igf. Install from that link, not the branch.

## Related on Air Market

- [More Security listings](/category/security)
- [Everything by codecolorist](/@chichou)

---

Canonical URL: <https://airmarket.ai/app/igf>