workstation-security

Audit macOS workstation security settings and generate remediation reports.

1|1|Updated Feb 2, 2026
One-click install
npx skills add https://github.com/navikt/watson-sak-frontend --skill workstation-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: workstation-security
Source: https://github.com/navikt/watson-sak-frontend/tree/main/.opencode/skills/workstation-security
Command: npx skills add https://github.com/navikt/watson-sak-frontend --skill workstation-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps developers quickly verify and harden their macOS development workstation by performing comprehensive security checks and reporting findings.

Core Features & Use Cases

  • System hardening checks for macOS: firewall state, stealth mode, FileVault, SIP, Gatekeeper status.
  • Nav platform security posture: naisdevice, Kolide enrollment, GitHub CLI status, and general security tool presence.
  • Actionable remediation guidance and centralized report summarizing risks and suggested fixes.

Quick Start

Run the audit from the terminal to assess and strengthen your macOS development workstation.

Frequently Asked Questions about workstation-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on my macOS development workstation?

A macOS workstation security audit checks firewall state, stealth mode, FileVault, SIP, and Gatekeeper status. It inspects system settings and config files to verify your development environment meets baseline security hardening requirements.

Can I check if my Git credentials and local secrets are exposed on macOS?

Yes, the audit checks Git credentials and scans for local secret exposure on your workstation. It inspects configuration files and system settings to identify exposed sensitive data and provides remediation guidance to secure them.

How do I verify Nav and NAIS tooling presence for security compliance?

You can verify Nav platform security posture by checking naisdevice status, Kolide enrollment, and GitHub CLI configuration. The audit assesses your general security tool presence and reports whether local machines meet compliance requirements.

What is the best way to harden macOS firewall and SSH configuration for development?

The best way to harden macOS firewall and SSH configuration is through an automated security assessment that checks stealth mode and SSH settings. It evaluates your current system posture and generates centralized guidance for suggested fixes.

Does this workstation security audit work in CI-like environments or only local machines?

The workstation security audit applies to both local machines and CI-like environments. It performs rapid hardening assessments by inspecting installed tooling, network exposure, and system settings regardless of the specific macOS environment.