applescript
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the use of the macOS
osascriptutility to control applications and the system. It includes robust architectural patterns, such as aSecureAppleScriptRunner, which uses application blocklists and regex-based pattern matching to restrict execution to safe operations.\n- [PROMPT_INJECTION]: The documentation identifies the risk of script injection when interpolating user data. It provides validated code snippets for escaping special characters and using thequoted form ofAppleScript idiom to ensure that user input is treated as literal data rather than executable code.\n- [REMOTE_CODE_EXECUTION]: Potential RCE vectors involving shell-based downloads (e.g.,curl) are documented with corresponding defensive controls. The skill recommends blocking such patterns and using predefined, validated templates for all automation tasks.
Audit Metadata