---
allowed-tools: Bash(bash *audit_security.sh*)
description: Security posture assessment — SIP, Gatekeeper, Firewall, FileVault, SSH, ports
---

## Your task

Run a read-only security posture assessment.

### Step 1 — Run the audit

```bash
bash $CLAUDE_PLUGIN_ROOT/skills/mac-optimizer/scripts/audit_security.sh
```

### Step 2 — Report

Parse JSON output and present as a severity-ranked markdown table:

| Severity | Finding | Recommended Action | Details |
|---|---|---|---|

### Step 3 — Guidance only

The security module is **read-only**. Present findings and remediation guidance. Do NOT attempt to change security settings. Explain how the user can fix issues themselves via System Settings or Terminal commands.