菜单
Comprehensive macOS development environment health check. Detects brew drift, orphaned packages, security issues, version mismatches, and deferred cleanup readiness.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/edfenton/claude-skills --skill mac-audit命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
Scaffold a pnpm + Turborepo MERN monorepo with Next.js, tooling, tests, CI, and optional GitHub repo creation.
Configure GitHub repository security with branch protection, Dependabot, security scanning, and CI workflows. Integrates with mern-scaffold, nean-scaffold, and iOS projects.
Harden a Vercel deployment with security headers, CSP, bot protection, and deployment configuration
正在显示 SKILL.md
基于 SOC 职业分类
| name | mac-audit |
| description | Comprehensive macOS development environment health check. Detects brew drift, orphaned packages, security issues, version mismatches, and deferred cleanup readiness. |
| argument-hint | [--section <name>] [--deferred-only] |
| allowed-tools | Bash, Read, Glob, Grep |
Audit the macOS development environment for drift, security issues, and cleanup opportunities. Compares current state against the declared Brewfile and AUDIT.md project requirements. Produces a markdown report with pass/warn/fail indicators.
Run quarterly (or after major environment changes) to catch drift before it accumulates.
--section <name> — run only one section (brew-drift, orphans, security, versions, services, disk, shell, deferred)--deferred-only — only check deferred item readiness (quick check)BREWFILE=~/Developer/projects/macbook-clean/Brewfile
AUDIT_MD=~/Developer/projects/macbook-clean/AUDIT.md
Print a markdown report with a timestamp header and sections for each category. Use these indicators:
PASS — healthy, no action neededWARN — not broken but worth investigatingFAIL — needs attentionExample:
## Mac Environment Audit — 2026-02-12
### 1. Brew Drift
- PASS: 0 formulae installed but not in Brewfile
- WARN: 2 formulae in Brewfile but not installed (postgresql@16, gitleaks)
Run each check inline using Bash commands. Do NOT create or depend on external scripts — keep the skill self-contained.
Goal: Detect packages that have been installed ad-hoc (not declared in Brewfile) or declared but missing.
Steps:
~/Developer/projects/macbook-clean/Brewfilebrew ") and cask names (lines starting with cask ")brew leaves to get currently installed top-level formulaebrew list --cask to get installed casksbrew bundle check --file=~/Developer/projects/macbook-clean/Brewfile for the official checkGoal: Find formulae that nothing depends on and no project needs.
Steps:
brew uses --installed <formula> to see if any installed formula depends on itGoal: Detect exposed secrets in environment and shell config.
Steps:
env | grep -iE 'token|secret|key|password' and review results
~/.zshrc for hardcoded credentials:
grep -inE '(token|secret|password|api_key)\s*=' ~/.zshrc~/.zprofile for hardcoded credentials:
grep -inE '(token|secret|password|api_key)\s*=' ~/.zprofile.env files outside project directories:
find ~ -maxdepth 2 -name '.env' -not -path '*/Developer/projects/*' -not -path '*/.claude/*' 2>/dev/nullGoal: Verify runtime versions match project requirements.
Steps:
node --version — should be v22.x (project requirement)which -a node — NVM path should come first, should show 1-2 entries (not more)python3 --version — should be 3.13.xwhich -a python3 — should show 1-2 entries (not 4)brew info --json=v2 --installed | jq '[.formulae[] | select(.deprecated == true) | .name]'brew outdated --json=v2 | jq '[.formulae[].name] | length' — report countGoal: Detect services that shouldn't be running, or zombie LaunchAgents.
Steps:
brew services list to get all Homebrew-managed servicesls ~/Library/LaunchAgents/ 2>/dev/null | grep homebrewbrew services list — if a plist exists but service is stopped/error, flag as zombieGoal: Flag large caches and scattered node_modules.
Steps:
du -sh, suppress errors):
/opt/homebrew~/.npm~/Library/Caches/Homebrew~/Library/Caches/pip~/.nvm~/.pnpm-store (if exists)node_modules directories outside ~/Developer/projects/:
find ~ -maxdepth 4 -name node_modules -type d -not -path '*/Developer/projects/*' -not -path '*/.nvm/*' 2>/dev/nullGoal: Detect PATH and config issues that cause confusion.
Steps:
echo $PATH | tr ':' '\n' | sort | uniq -decho $PATH | tr ':' '\n' | while read -r d; do [ ! -d "$d" ] && echo "$d"; done/var/run/com.apple.security.cryptexd/)~/.zshrc:
grep '^alias ' ~/.zshrc | awk -F= '{print $1}' | sort | uniq -d~/.profile exists and is empty (pointless file)~/.bash_profile exists (leftover from bash)Goal: Check whether items deferred during remediation are now safe to remove.
For each deferred item, run the specified check and report status:
| Deferred Item | Condition to Become Safe | Check Command |
|---|---|---|
Homebrew node | No installed formulae depend on it | brew uses --installed node |
python@3.14 | semgrep no longer depends on it | brew uses --installed python@3.14 |
icu4c@76 | All dependents removed or upgraded | brew uses --installed icu4c@76 |
icu4c@77 | All dependents removed or upgraded | brew uses --installed icu4c@77 |
postgresql@14 | Data migrated to @16, @14 stopped | Check brew services list for @14 stopped AND @16 running |
Report for each item:
Expected baselines (from initial audit):
node: 4 dependents (eslint, mongodb-community, mongosh, prettier)python@3.14: 1 dependent (semgrep)icu4c@76: 6 dependents (eslint, maven, openjdk, openjdk@11, postgresql@14, prettier)icu4c@77: 8 dependents (composer, libpq, mysql@8.0, openjdk@17, openjdk@21, opensearch, php, php@8.1)postgresql@14: running via LaunchAgent