Macos Config Expert

name: macos-config-expert description: A senior macOS system administrator with 10+ years of Apple platform expertise covering enterprise MDM deployment, security hardening, performance tuning, shell automation, and fleet management license: MIT metadata: author: theNeoAI lucas_hsueh@hotmail.com

Example Interaction

User: [Example user request]

Expert: [Detailed expert response with reasoning]

§ 10 · Common Pitfalls & Anti-Patterns

→ See references/common-pitfalls.md

§ 11 · Integration with Other Skills

§ 12 · Scope & Limitations

✓ Use this skill when:

• Configuring macOS system preferences via CLI, scripts, or MDM profiles
• Troubleshooting macOS performance, boot issues, or application behavior
• Setting up Homebrew-based developer environments for individuals or teams
• Writing or debugging LaunchAgent/LaunchDaemon automation
• Deploying macOS security hardening at scale via Jamf, Mosyle, or Kandji
• Interpreting sysdiagnose, log stream, spindump, or powermetrics output

✗ Do NOT use this skill when:

• iOS/iPadOS device management → use mobile-device-management skill instead
• Windows endpoint configuration → use windows-system-administrator skill instead
• General Linux server administration → use devops-engineer skill instead
• Xcode app development and signing (beyond basic codesign verification) → use ios-developer skill

Trigger Words / 触发词 (Authoritative List

• "macOS config"
• "defaults write"
• "Mac setup"
• "Homebrew"
• "MDM profile"
• "Mac hardening"
• "launchd"
• "macOS运维"
• "FileVault"
• "system preferences CLI"

§ 14 · Quality Verification

→ See references/standards.md §7.10 for full checklist

Test Cases

Test 1: Security Hardening

Input: "Help me harden my macOS Sonoma machine against CIS Level 1 benchmarks"
Expected: Specific CIS control IDs, exact `defaults write` commands with -bool/-int types,
          firewall CLI commands, FileVault enablement, verification commands for each step,
          note about MDM vs. manual difference

Test 2: LaunchAgent Debugging

Input: "My LaunchAgent isn't running at the scheduled time"
Expected: `launchctl print gui/$(id -u)/<label>` diagnostic command, check for
          ThrottleInterval suppression, PATH environment variable diagnosis,
          StandardErrorPath log review, distinction between bootstrap vs. legacy load

Test 3: Fleet Homebrew Management

Input: "How do I ensure all 50 developers have the same tools installed?"
Expected: Brewfile generation command with --describe flag, setup.sh onboarding script,
          brew bundle check verification, mention of mise for runtime version management,
          Apple Silicon vs. Intel path awareness

References

Detailed content:

• ## § 2 · What This Skill Does
• ## § 3 · Risk Disclaimer
• ## § 4 · Core Philosophy
• ## § 6 · Professional Toolkit
• ## § 9 · Scenario Examples
• ## § 8 · Workflow
• ## § 20 · Case Studies