# Macos Software Management

> Manage persistent macOS software installations with Homebrew Bundle, mise, Mac App Store, and fnox. Use whenever installing, removing, or provisioning a Mac app, CLI, runtime, developer tool, or secret-backed tool.

- Skill: `tkoenig/macos-software-management` (Agent Skill)
- Install (CLI): `npx skillmds@latest add tkoenig/macos-software-management`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tkoenig/macos-software-management/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: tkoenig (https://skillmd.com/u/tkoenig)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tkoenig/macos-software-management

---


# macOS Software Management

Keep installs reproducible in `~/.dotfiles`:

- Formulae, casks, App Store apps: `Brewfile`
- Project/default runtimes: `mise.toml`
- Global versioned tools: `mise/config.toml`
- Secret references: `fnox/config.toml`; values stay in Keychain

## Rules

1. Update the appropriate manifest before installing or removing anything.
2. Install only the requested item directly; use `brew bundle install` only when provisioning the full manifest.
3. Prefer `brew` for macOS packages/apps and `mise` for runtimes or versioned developer tools.
4. Verify cask names and `mas` IDs before editing.
5. Never run `brew bundle cleanup --force` without explicit approval.
6. Never commit secret values.