skills.rest
hanabi-jpn
hanabi-jpnCOMMUNITY
Explore all skills by this author →
GitHub

mac-sentinel

Harden macOS environments and detect threats for Claude Code.

3|2|Updated Mar 1, 2026
Search Tags:#security#claude code#macos#hardening#mac sentinel
One-click install
npx skills add https://github.com/hanabi-jpn/clawhub-skills --skill mac-sentinel-hanabi-jpn
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: mac-sentinel
Source: https://github.com/hanabi-jpn/clawhub-skills/tree/main/security-devops-pack/mac-sentinel
Command: npx skills add https://github.com/hanabi-jpn/clawhub-skills --skill mac-sentinel-hanabi-jpn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill provides comprehensive security hardening for macOS environments running Claude Code, protecting against malicious code and unauthorized access.

Core Features & Use Cases

  • MacOS Platform Assessment: Ensures Gatekeeper, SIP, and FileVault are active and correctly configured.
  • Runtime Behavior Monitoring: Validates Claude Code hooks and verifies MCP server integrity before connections are established.
  • Credential Hygiene: Ensures API keys and other credentials are protected from leaks.
  • Use Case: A developer is running Claude Code and needs to ensure their environment is secure from potential attacks. Mac Sentinel performs an assessment and continuously monitors for suspicious activity.

Quick Start

To scan the current project directory for security vulnerabilities, run: sentinel scan

Frequently Asked Questions about mac-sentinel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure my macOS environment for Claude Code against known vulnerabilities?▼

To secure macOS for Claude Code, you must validate hooks, check MCP server integrity, and apply macOS security baselines. This protects against specific threats like CVE-2025-59536 and CVE-2026-21852 by monitoring runtime behavior and ensuring credential hygiene.

What does macOS security hardening for Claude Code involve?▼

macOS security hardening involves assessing Gatekeeper, SIP, and FileVault configurations to ensure they are active. It also includes continuously monitoring for suspicious activity and verifying MCP server integrity before connections are established to prevent unauthorized access.

Do I need system privileges to apply macOS security baselines for Claude Code?▼

Yes, applying macOS security baselines requires system privileges. These privileges are necessary to enforce platform-level security controls, validate Claude Code hooks, and continuously monitor the environment for malicious code or suspicious activity.

How can I check MCP server integrity before establishing connections in Claude Code?▼

You can check MCP server integrity by running a security scan using the sentinel scan command in your project directory. This validates Claude Code hooks and verifies server integrity to prevent unauthorized access and protect API keys from leaking.

What is the best way to protect Claude Code API keys from leaking on macOS?▼

The best way to protect Claude Code API keys is by enforcing credential hygiene through continuous runtime behavior monitoring. Validating Claude Code hooks and verifying MCP server integrity before connections ensures credentials remain protected from potential attacks.

Are there limitations to runtime behavior monitoring for Claude Code on macOS?▼

Runtime behavior monitoring is limited to validating Claude Code hooks and checking MCP server integrity. It requires active system privileges to apply baselines and cannot protect against threats bypassing Gatekeeper, SIP, or FileVault if those macOS platform controls are misconfigured or disabled.

Related Skills

Explore More Software Engineering Skills→
tankpkgtankpkg
1

@tank/macos-maintenance

Analyze macOS system health and security status into a scored report.

Official
Intermediate
0xRayAI0xRayAI

security-audit

Automate security auditing and compliance validation for software projects.

Official
Intermediate
traygerbigtraygerbig
1

mac-sentinel

Harden macOS security and validate Claude Code configurations.

Community
Advanced
thesammykinsthesammykins

windows-hardening

Apply security baselines, GPO hardening, and patch management to Windows endpoints.

Community
Advanced