use-chatgpt-by-applescript

The utility's behavior is consistent with a ChatGPT research runner, but the unquoted SSH host value creates a command-injection risk when SSH mode is used. Restrict and validate the host value, and invoke commands using safe argument APIs rather than interpolated shell strings. No clear malicious payload is present in the supplied code.