Applescript

This one wraps AppleScript and JXA automation in proper security controls, which honestly should be table stakes for any tool executing osascript commands. It blocks dangerous patterns like rm -rf and sudo escalation, sanitizes inputs before interpolation, and keeps you away from password managers and system preferences. The implementation is TDD-first with a SecureAppleScriptRunner class that validates against blocklists and enforces timeouts. Use this when you need to automate Mac apps but can't risk command injection or accidentally nuking something important. The quoted form of escaping and shell command allowlisting are genuinely thoughtful touches that save you from the usual footguns.