mac-audit

name	mac-audit
description	Comprehensive macOS development environment health check. Detects brew drift, orphaned packages, security issues, version mismatches, and deferred cleanup readiness.
argument-hint	[--section <name>] [--deferred-only]
allowed-tools	Bash, Read, Glob, Grep

Purpose

Audit the macOS development environment for drift, security issues, and cleanup opportunities. Compares current state against the declared Brewfile and AUDIT.md project requirements. Produces a markdown report with pass/warn/fail indicators.

Run quarterly (or after major environment changes) to catch drift before it accumulates.

Arguments

• No arguments — run all 8 checks
• --section <name> — run only one section (brew-drift, orphans, security, versions, services, disk, shell, deferred)
• --deferred-only — only check deferred item readiness (quick check)

Configuration paths

BREWFILE=~/Developer/projects/macbook-clean/Brewfile
AUDIT_MD=~/Developer/projects/macbook-clean/AUDIT.md

Output format

Print a markdown report with a timestamp header and sections for each category. Use these indicators:

• PASS — healthy, no action needed
• WARN — not broken but worth investigating
• FAIL — needs attention