macflow-check

Find the settings on your Mac that let an AI agent, a cloned repo or a package run code or read your keys. Read-only, open source, one command.

$brew install mazharul/tap/macflow-check
$macflow-check
Source on GitHubMIT · macOS · Apple silicon and Intel
macflow-check output: 7 to fix now and 2 worth fixing, each with a fix and the file and line to change
A demo home folder with planted problems. Most urgent first, each with a fix. Secret values are never printed.

What it checks

AI agents

  • Auto-approve and bypass settings in Claude Code, Cursor, VS Code, Codex, Gemini CLI and aider
  • Claude Code hooks and plugins that download or run code
  • MCP servers on unpinned npx packages or with keys in their config
  • VS Code tasks that run when a folder opens
  • AI keys in .env files
  • Hidden text in agent rules files

Your Mac

  • Git config that runs a program on everyday git commands
  • Plaintext npm, PyPI, git, AWS, Google Cloud, Docker and Kubernetes credentials
  • SSH keys without a passphrase and host checking turned off
  • Shell startup lines that pipe a download into a shell
  • LaunchAgents that run from temporary folders or fetch scripts
  • Vulnerable or malicious packages in lockfiles, compromised editor extensions, outdated PHP

Plus reclaimable cache and node_modules space. Each check follows a published incident; the sources and every rule are in the README. “No known match” means none of the checks matched, not that nothing is wrong.

What leaves your Mac

The dependency check sends each lockfile package's name, version and ecosystem to OSV.dev. Nothing else: no files, paths, findings or secrets, and no telemetry. --offline skips it.

Continuous watching (planned)

macflow-check shows what is set today. MacFlow, our Mac app, snapshots your dev setup and shows what changed; watching these checks continuously is planned there. The scanner stays free and open source.

Download MacFlow for macOS

Without Homebrew

$curl -fsSL https://raw.githubusercontent.com/mazharul/macflow-check/main/install.sh | sh

Verifies the SHA-256 and installs to ~/.local/bin, no sudo. Or from source:

$cargo install --git https://github.com/mazharul/macflow-check