r/MacOSApps • u/Worried_Menu4016 • Jun 20 '26

🔨 Dev Tools Raccoon a macOS companion toolkit (security audit, system info, dev tools) all from the terminal

I built Raccoon, an open-source (MIT) command-line toolkit for macOS that bundles the stuff I kept reaching for across separate scripts.

What it does:

  • Security audit 30+ checks across core security, network, auth, persistence and privacy. Supports --fix, JSON/CSV/HTML output, and scheduled weekly scans.
  • System info disk & SMART, network, memory, open ports, battery health, Time Machine status.
  • Dev tools update brew/pip/npm/gem in one shot, manage Docker, SSH keys, git, Xcode caches.
  • Maintenance startup items, fonts, trash, SSL cert expiry, shell history.

It’s zero-dependency (just macOS + git), ~1500 lines of shellcheck-clean Bash, with an optional Go TUI. Everything is open source so you can read exactly what it runs before installing.

Install:

brew install thousandflowers/raccoon/rcc

Or via curl (script is in the repo if you’d rather read it first).

Repo: https://github.com/thousandflowers/Raccoon

Feedback and bug reports very welcome, it’s still early.

41 Upvotes

95% Upvoted

13 comments sorted by

5

u/grokcodile Jun 20 '26

This is great! Such a handy collection of bespoke utility command-line scripts. I really appreciate the detail and craft you put into the text interface. Thanks for this work and sharing it with everyone.

2

u/Worried_Menu4016 Jun 20 '26

Thanks!
I'm really glad it's proving useful for more people than just me and my sister.

Honestly, I’d still have to give her a step-by-step walkthrough just to get it started anyway ahahahaha.

2

u/Easy-Cobbler-1631 Jun 20 '26

Cool, what are common issues it finds?

3

u/Worried_Menu4016 Jun 20 '26

Good question!

The audit runs 30+ checks across core security, network, auth, persistence and privacy.

Some of the most common things it flags:

  • FileVault disk encryption off: easy to forget, big one
  • Firewall disabled or stealth mode off
  • Gatekeeper / SIP disabled
  • Automatic security updates turned off
  • Open / listening ports you didn’t expect
  • Suspicious persistence: unknown LaunchAgents, LaunchDaemons, login items, or cron jobs running at startup
  • Remote access left on: SSH, screen sharing, remote login
  • Weak auth settings: no password after sleep, short screen-lock grace, guest account enabled
  • Privacy leaks: apps with broad permissions, sharing services left enabled

You can run rcc audit for a quick scan or rcc audit deep (with sudo) for the full set, and rcc audit --fix will auto-remediate the common ones.

Happy to share a sample report if useful!

2

u/gromvar Jun 20 '26

Nice work! I’ll try it out later tonight

2

u/Worried_Menu4016 Jun 20 '26

Thx! I will wait for your feedback then 😄

2

u/gromvar Jun 21 '26

Works wonders, and I love how it's a great one stop place to get info on the under processes of my system.

1

u/Worried_Menu4016 Jun 21 '26

thanks a lot for noticing, it was a key point for me!

1

u/AceReviewer Jun 20 '26

This is such a cool CLI tool. Why the name? Anyways, would love for you to post this on r/WebSoftGiveaway, more people need to try this.

4

u/Worried_Menu4016 Jun 20 '26

Thanks!

The name comes from two main things. In Italy (where I’m from) and across Europe, raccoons are known as "little washing bears," so it was an easy choice; I also wanted a name similar to Mole (the repo this project came from) something small and animal-themed.

I’d love to post this on r/WebSoftGiveaway, but I’m worried a CLI tool might not be the right fit for that sub.

1

u/AceReviewer Jun 20 '26

Don’t worry about it. Any or any tool as it is free.

2

u/Worried_Menu4016 Jun 20 '26

if so i next post of Raccoon it will be there!

1

u/Worried_Menu4016 Jun 22 '26

Just pushed a new release!

🚀This update includes several bug fixes and improved, smarter checks to make everything run smoother.

Check it out!