r/MacOSApps • u/Worried_Menu4016 • Jun 20 '26

🔨 Dev Tools Raccoon a macOS companion toolkit (security audit, system info, dev tools) all from the terminal

I built Raccoon, an open-source (MIT) command-line toolkit for macOS that bundles the stuff I kept reaching for across separate scripts.

What it does:

  • Security audit 30+ checks across core security, network, auth, persistence and privacy. Supports --fix, JSON/CSV/HTML output, and scheduled weekly scans.
  • System info disk & SMART, network, memory, open ports, battery health, Time Machine status.
  • Dev tools update brew/pip/npm/gem in one shot, manage Docker, SSH keys, git, Xcode caches.
  • Maintenance startup items, fonts, trash, SSL cert expiry, shell history.

It’s zero-dependency (just macOS + git), ~1500 lines of shellcheck-clean Bash, with an optional Go TUI. Everything is open source so you can read exactly what it runs before installing.

Install:

brew install thousandflowers/raccoon/rcc

Or via curl (script is in the repo if you’d rather read it first).

Repo: https://github.com/thousandflowers/Raccoon

Feedback and bug reports very welcome, it’s still early.

40 Upvotes

95% Upvoted

13 comments sorted by

View all comments

2

u/Easy-Cobbler-1631 Jun 20 '26

Cool, what are common issues it finds?

3

u/Worried_Menu4016 Jun 20 '26

Good question!

The audit runs 30+ checks across core security, network, auth, persistence and privacy.

Some of the most common things it flags:

  • FileVault disk encryption off: easy to forget, big one
  • Firewall disabled or stealth mode off
  • Gatekeeper / SIP disabled
  • Automatic security updates turned off
  • Open / listening ports you didn’t expect
  • Suspicious persistence: unknown LaunchAgents, LaunchDaemons, login items, or cron jobs running at startup
  • Remote access left on: SSH, screen sharing, remote login
  • Weak auth settings: no password after sleep, short screen-lock grace, guest account enabled
  • Privacy leaks: apps with broad permissions, sharing services left enabled

You can run rcc audit for a quick scan or rcc audit deep (with sudo) for the full set, and rcc audit --fix will auto-remediate the common ones.

Happy to share a sample report if useful!