Agent skill · security · aradotso
macos-security-hardening
Comprehensive guide for securing and hardening macOS systems with privacy-focused configurations, firewall rules, and security best practices
Why this skill is useful
Provides specific commands and configurations for securing macOS systems that the AI wouldn't reliably generate on its own.
What it needs
About 10k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
macOS Security Hardening Skill by ara.so — Security Skills collection. This skill provides comprehensive guidance for securing macOS systems based on the community-maintained drduh/macOS-Security-and-Privacy-Guide. It covers system hardening, encryption, firewall configuration, DNS security, and privacy enhancements for both Apple silicon and Intel Macs. Overview The macOS Security and Privacy Guide is a collection of battle-tested techniques for: Full disk encryption with FileVault Firewall configuration (application-level and packet filtering) DNS security with DNSCrypt and encrypted DNS profiles Privacy hardening by disabling telemetry and tracking Secure browsing configurations for Firefox, Chrome, and Safari System monitoring with OpenBSM and DTrace Physical security measures and admin account separation Important: Apple silicon Macs are strongly recommended over Intel Macs due to hardware-level security vulnerabilities in Intel CPUs that cannot be patched. Threat Modeling Framework Before applying any security measures, create a threat model: Asset Identification Adversary Analysis Template Adversary Motivation Capabilities Mitigation ----------- ----------- -------------- ------------ Roommate Curiosity Physical access, screen viewing Use FileVault, auto-lock screen, privacy filters Thief Financial gain Device theft, shoulder surfing Find My Mac, strong passwords, remote wipe Criminal Data theft Malware, phishing, exploits Gatekeeper, firewall, updated software Corporation Data collection Telemetry, tracking Block telemetry, DNS filtering, VPN Nation State Surveillance Advanced exploits, traffic analysis Full encryption, Tor, air-gapped backups System Updates Keep macOS and all software current: FileVault Full Disk Encryption FileVault encrypts your entire disk using XTS-AES-128 with a 256-bit key. Important: Store your recovery key in a secure location separate from your Mac (e.g., password manager, safe). …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/macos-security-hardening