desktop-automation

This is a macOS automation wrapper with a deliberately powerful osascript execution feature. It is not inherently malicious based on the supplied fragment, but it is high-impact if exposed to untrusted callers. The open_app action also has an AppleScript injection issue due to unescaped application names. Restrict access to trusted input and validate or safely escape app names; avoid exposing arbitrary script execution to untrusted users.