Ops Mac

What it does

When your agent uses it

• Asks to mac is slow

Example prompts

• “mac is slow”
• “macos fix”
• “/ops-mac”

Requirements

• Pre-approved tools (allowed-tools): Bash, Read, Grep, Glob, AskUserQuestion

Workflow steps

4 steps, taken from the step headings in SKILL.md.

1. 1Firewall — opt-in only, never offered
2. 2Stale / crashing launchd user daemons
3. 3Reclaimable disk
4. 4App updates

What it can do on your machine

Read from SKILL.md and the folder at commit 1aa0928. It shows what the files ask for, not the result of running them.

• Tool permissions

  Pre-approves these tools, so the agent can use them without asking each time:

  • Bash
  • Read
  • Grep
  • Glob
  • AskUserQuestion

  From allowed-tools in the SKILL.md frontmatter.

• Runs code

  No scripts in the folder and no shell commands in SKILL.md (its code samples are bash).

  From the folder's file list and the shell code blocks in SKILL.md.

• Network

  Links to these hosts (documentation or services it may open):

  • github.com

  From URLs in SKILL.md, links to its own repository left out.

• Credentials

  Names no API keys, tokens, secrets or passwords.

  From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Ops Mac loads about 1.8k tokens when it runs. Until then it costs about 26 tokens; SKILL.md has 704 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it

~26

When it runs · the whole SKILL.md, loaded when a task matches

~1.8k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

• NoteRuns commands with sudoSKILL.md:109

  sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on

• NoteRuns commands with sudoSKILL.md:110

  # stealth (optional): sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode on

• NotePre-approves every shell command (allowed-tools: Bash)SKILL.md

  allowed-tools: Bash, Read, Grep, Glob, AskUserQuestion

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from Lifecycle-Innovations-Limited/claude-ops at commit 1aa0928, republished under its MIT licence (© Lifecycle-Innovations-Limited). 704 words, ~1,804 tokens.

name

ops-mac

description

OPS on-demand: This skill should be used when the user asks to "mac is slow", "macos fix", or…

allowed-tools

Bash, Read, Grep, Glob, AskUserQuestion

argument-hint

[audit|health|net|disk|procs|security|launchd|fix|ensure|update]

effort

low

maxTurns

30

${CLAUDE_PLUGIN_ROOT}/bin/ops-mac ensure

${CLAUDE_PLUGIN_ROOT}/bin/ops-mac audit

OPS ► MAC AUDIT — [version] ([arch])

🔴/🟡/🟢 Security    grade [X]/100 — [firewall/SIP/FileVault/Gatekeeper/remote-login]
🔴/🟡/🟢 Launchd     [N] genuinely-broken user daemons (Apple -9/SIGKILL noise filtered out)
🟢 Processes  top hog: [name] [N]% CPU
🟢 Network    [iface] [ip] — [ok/degraded]
🟢 Disk       ~[N] GB safe reclaimable (biggest: [cache] [N] GB)
⚠ Health     [machealth result, or "probe timed out — TM/iCloud stuck"]

Next: /ops:mac fix to remediate, or pick one area.

sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on
# stealth (optional): sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode on

com.example.foo — binary missing at [path]. This launchd job is dead.
  [Show the plist first]  [Remove it]  [Disable (keep file)]  [Skip]

macbroom found ~[N] GB of safe cache. Categories: [list].
  [Clean safe caches]  [Pick categories]  [Review largest first]  [Skip]

macbroom clean --caches            # confirm prompt; or --yolo only after explicit approval

${CLAUDE_PLUGIN_ROOT}/bin/ops-mac update    # updater check — then confirm before applying

mac audit:
security B/100 — firewall OFF.
launchd: 2 dead user daemons.
disk: 8.6 GB safe to clean.
health: machealth probe stuck (TM/iCloud).
fix? /ops:mac fix

© Lifecycle-Innovations-Limited, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in claude-ops/skills/ops-mac of Lifecycle-Innovations-Limited/claude-ops.

Open the folder on GitHubat commit 1aa0928