applescript

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill facilitates the use of the macOS osascript utility to control applications and the system. It includes robust architectural patterns, such as a SecureAppleScriptRunner, which uses application blocklists and regex-based pattern matching to restrict execution to safe operations.\n- [PROMPT_INJECTION]: The documentation identifies the risk of script injection when interpolating user data. It provides validated code snippets for escaping special characters and using the quoted form of AppleScript idiom to ensure that user input is treated as literal data rather than executable code.\n- [REMOTE_CODE_EXECUTION]: Potential RCE vectors involving shell-based downloads (e.g., curl) are documented with corresponding defensive controls. The skill recommends blocking such patterns and using predefined, validated templates for all automation tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 02:01 PM
Security Audit — agent-trust-hub — applescript