dock-app

This script is intended to create a macOS app wrapper and optionally pin it to the Dock. The primary risks are path traversal through the app-name argument, which can redirect rm -rf, and unescaped launcher-path interpolation that can inject shell commands when the generated app runs. No network destinations, credentials, or exfiltration behavior are present. Severity is moderate to high if arguments can be attacker-controlled; otherwise the risks depend on the caller's inputs.