Skip to content

fix(computer-use): refuse Script Editor, Automator and Shortcuts, which run shell commands outside the Terminal control - #9990

Merged
waleedlatif1 merged 1 commit into
stagingfrom
fix/computer-use-scripting-apps
Nov 13, 2026
Merged

waleedlatif1 merged 1 commit into
stagingfrom
fix/computer-use-scripting-apps

Conversation

@waleedlatif1

Copy link
Copy Markdown
Collaborator

Summary

  • Computer Use already refuses terminals so shell access goes through the separate Terminal control; Script Editor (do shell script), Automator and Shortcuts ("Run Shell Script") offered the same shell access through the GUI. They are now protected too (com.apple.ScriptEditor2, com.apple.Automator, com.apple.shortcuts, read from each app's Info.plist; matched case-insensitively)
  • The line is apps whose primary purpose is running shell commands or scripts; editors and IDEs that embed a terminal stay usable. This is a policy boundary, not a sandbox
  • Error message, Settings line, docs and READMEs now name scripting apps

Type of Change

  • Bug fix

Testing

  • Native checks on macOS 26 assert the three scripting apps are refused (PASS); with the entries removed they fail on Script Editor
  • Settings desktop suite, check:comment-hygiene; full gate in CI

Checklist

  • Code follows project style guidelines
  • Self-reviewed my changes
  • Tests added/updated and passing (new tests pass the test-audit authoring gate)
  • No new warnings introduced
  • I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

…ch run shell commands outside the Terminal control
@vercel

vercel Bot commented Nov 13, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
docs Ready Ready Preview Nov 13, 2026 6:00am UTC

Request Review

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 6 files

Confidence score: 5/5

  • Automated review surfaced no issues in the provided summaries.
  • No files require special attention.

Turn on auto-fix | Re-trigger cubic

@greptile-apps

greptile-apps Bot commented Nov 13, 2026 •

Copy link
Copy Markdown
Contributor

RetriggerView in GreptileConfidence Score: 5/5

[Medium impact] This PR appears safe to merge.

Summary

Computer Use now refuses Script Editor, Automator, and Shortcuts through the existing case-insensitive protected-app check.

  • Computer Use now refuses Script Editor, Automator, and Shortcuts.

Native tests and visual checks were not run in this Linux environment.

Reviews (1) · Last reviewed commit: "fix(computer-use): refuse Script Editor,..." · Reviewed by Greptile

This branch was successfully deployed

1 active deployment
Preview — c16e39f9 Deployed Nov 13, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant