Apple Events is a macOS automation framework that lets one app send commands to another app. It is commonly used for legitimate scripting and workflow automation, but it is gated by user consent and system prompts because it can let software control documents, windows, menus, and other app actions. In practice, Apple Events is one of the main ways macOS lets apps cooperate without sharing the same code.
From a security perspective, Apple Events matters because automation is a form of delegated power. If an attacker can trick a user into approving access, or if a trusted app is abused, the sender may be able to drive another app to open files, exfiltrate data, or perform unwanted actions. Defenders should treat automation permissions as sensitive, review which apps have Apple Events access, and limit it with least privilege. In AI agents and desktop assistants, this control boundary is especially important because a prompt can become a real command.


