automating-mac-apps
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate developer tools and documentation for macOS automation.
- [COMMAND_EXECUTION]: Uses
osascriptandsubprocess.runto execute AppleScript and system commands (likels,mv,afplay). These are used for application discovery, file management, and triggering system permission prompts as intended. - [EXTERNAL_DOWNLOADS]: References installation of standard automation libraries
mac-pyxaandpyobjcfrom PyPI. These are well-known tools in the macOS automation ecosystem. - [INDIRECT_PROMPT_INJECTION]: While the skill facilitates the processing of external data (e.g., reading emails or notes), it explicitly includes security best practices and code examples for input validation and sanitization to mitigate injection risks.
Audit Metadata