macos-accessibility — Skillopedia

1. Overview Risk Level : HIGH - System-level access, TCC permission requirements, process interaction You are an expert in macOS Accessibility automation with deep expertise in: - AXUIElement API : Accessibility element hierarchy, attributes, actions - TCC (Transparency, Consent, Control) : Permission management - ApplicationServices Framework : System-level automation integration - Security Boundaries : Sandbox restrictions, hardened runtime Core Expertise Areas 1. Accessibility APIs : AXUIElementRef, AXObserver, attribute queries 2. TCC Permissions : Accessibility permission requests, valid…

\n return bool(re.match(pattern, bundle_id)) and len(bundle_id) \u003c= 255\n\ndef sanitize_ax_value(value: str) -> str:\n \"\"\"Sanitize accessibility attribute value.\"\"\"\n if not value:\n return ''\n return value[:10000].replace('\\x00', '')\n```\n\n## Audit Logging\n\n```python\nimport json\nimport logging\n\nclass AXAuditLogger:\n \"\"\"Audit logging for accessibility operations.\"\"\"\n\n def log_operation(self, operation: str, bundle_id: str, element: str, success: bool):\n record = {\n 'timestamp': datetime.utcnow().isoformat(),\n 'event': 'ax_operation',\n 'operation': operation,\n 'bundle_id': bundle_id,\n 'element': element,\n 'success': success\n }\n logging.getLogger('ax.audit').info(json.dumps(record))\n\n def log_tcc_check(self, granted: bool):\n record = {\n 'timestamp': datetime.utcnow().isoformat(),\n 'event': 'tcc_check',\n 'permission': 'kTCCServiceAccessibility',\n 'granted': granted\n }\n logging.getLogger('ax.audit').info(json.dumps(record))\n```\n\n## Code Signature Verification\n\n```python\nimport subprocess\n\ndef verify_code_signature(app_path: str) -> dict:\n \"\"\"Verify macOS code signature.\"\"\"\n result = subprocess.run(\n ['codesign', '-dv', '--verbose=4', app_path],\n capture_output=True,\n text=True\n )\n\n info = {\n 'valid': result.returncode == 0,\n 'path': app_path,\n }\n\n if result.returncode == 0:\n # Parse signature info\n for line in result.stderr.split('\\n'):\n if 'TeamIdentifier=' in line:\n info['team_id'] = line.split('=')[1]\n elif 'Authority=' in line:\n info['authority'] = line.split('=')[1]\n\n return info\n```\n\n## TCC Database Query (Diagnostic Only)\n\n```python\nimport sqlite3\n\ndef query_tcc_permissions(bundle_id: str) -> list:\n \"\"\"Query TCC database for diagnostic purposes.\n Note: Requires Full Disk Access or SIP disabled.\n \"\"\"\n tcc_db = '/Library/Application Support/com.apple.TCC/TCC.db'\n\n try:\n conn = sqlite3.connect(tcc_db)\n cursor = conn.execute('''\n SELECT service, client, auth_value\n FROM access\n WHERE client = ?\n ''', (bundle_id,))\n\n return [\n {'service': row[0], 'client': row[1], 'granted': row[2] == 2}\n for row in cursor.fetchall()\n ]\n except Exception as e:\n return []\n```\n","content_type":"text/markdown; charset=utf-8","language":"markdown","size":3222,"content_sha256":"82f2dd1bc6641d715d305ea9f565a71406867db100e195e6e6a5cd2789073328"},{"filename":"references/threat-model.md","content":"# macOS Accessibility - Threat Model\n\n## Threat Model Overview\n\n**Domain Risk Level**: HIGH\n**Attack Surface**: System-wide accessibility access, TCC bypass potential\n\n### Assets to Protect\n\n1. **TCC Permissions** - CRITICAL - Gate to system-wide access\n2. **User Credentials** - CRITICAL - Keychain, password fields\n3. **System Integrity** - HIGH - Prevention of unauthorized automation\n4. **User Privacy** - HIGH - Screen content, application data\n\n---\n\n## Attack Scenario 1: TCC Bypass\n\n**Threat Category**: OWASP A01:2025 - Broken Access Control\n**Threat Level**: CRITICAL\n\n**Attack Flow**:\n```\n1. Attacker exploits TCC bypass vulnerability\n2. Gains accessibility permission without user consent\n3. Automates any application on system\n4. Exfiltrates sensitive data\n```\n\n**Mitigation**: Keep macOS updated, monitor TCC database for anomalies\n\n---\n\n## Attack Scenario 2: Keychain Access\n\n**Threat Category**: OWASP A07:2025 - Authentication Failures\n**Threat Level**: CRITICAL\n\n**Attack Flow**:\n```\n1. Automation targets Keychain Access\n2. Uses AX to read password entries\n3. Automates unlock if password cached\n4. Exfiltrates all credentials\n```\n\n**Mitigation**: Block Keychain Access in automation, never store master password\n\n---\n\n## Attack Scenario 3: Code Signature Bypass\n\n**Threat Category**: OWASP A05:2025 - Injection\n**Threat Level**: HIGH\n\n**Attack Flow**:\n```\n1. Malicious app spoofs trusted bundle ID\n2. Automation trusts app based on bundle ID\n3. Attacker injects malicious automation\n4. System compromised\n```\n\n**Mitigation**: Verify code signature, not just bundle ID\n\n---\n\n## Attack Scenario 4: Security Dialog Automation\n\n**Threat Category**: OWASP A01:2025 - Broken Access Control\n**Threat Level**: CRITICAL\n\n**Attack Flow**:\n```\n1. Trigger authentication dialog\n2. Use AX to find password field\n3. Inject known password or brute force\n4. Bypass authentication\n```\n\n**Mitigation**: Block SecurityAgent bundle ID, never automate auth dialogs\n\n---\n\n## STRIDE Analysis\n\n| Category | Threats | Mitigations | Priority |\n|----------|---------|-------------|----------|\n| **Spoofing** | Bundle ID spoofing | Code signature verification | CRITICAL |\n| **Tampering** | Modify automation targets | Hardened runtime check | HIGH |\n| **Repudiation** | Deny automation actions | Immutable audit logs | HIGH |\n| **Information Disclosure** | Read sensitive AX attributes | Attribute filtering | CRITICAL |\n| **Denial of Service** | Hang via slow AX calls | Timeouts | MEDIUM |\n| **Elevation of Privilege** | TCC bypass | Keep macOS updated | CRITICAL |\n","content_type":"text/markdown; charset=utf-8","language":"markdown","size":2560,"content_sha256":"929ccd53f00d20c519c7870823156c7fb2f8942692e9b143b11cfdfc2b83131b"}],"content_json":{"type":"doc","content":[{"type":"heading","attrs":{"level":2},"content":[{"text":"1. Overview","type":"text"}]},{"type":"paragraph","content":[{"text":"Risk Level","type":"text","marks":[{"type":"strong"}]},{"text":": HIGH - System-level access, TCC permission requirements, process interaction","type":"text"}]},{"type":"paragraph","content":[{"text":"You are an expert in macOS Accessibility automation with deep expertise in:","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"AXUIElement API","type":"text","marks":[{"type":"strong"}]},{"text":": Accessibility element hierarchy, attributes, actions","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"TCC (Transparency, Consent, Control)","type":"text","marks":[{"type":"strong"}]},{"text":": Permission management","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"ApplicationServices Framework","type":"text","marks":[{"type":"strong"}]},{"text":": System-level automation integration","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Security Boundaries","type":"text","marks":[{"type":"strong"}]},{"text":": Sandbox restrictions, hardened runtime","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Core Expertise Areas","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Accessibility APIs","type":"text","marks":[{"type":"strong"}]},{"text":": AXUIElementRef, AXObserver, attribute queries","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"TCC Permissions","type":"text","marks":[{"type":"strong"}]},{"text":": Accessibility permission requests, validation","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Process Management","type":"text","marks":[{"type":"strong"}]},{"text":": NSRunningApplication, process validation","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Security Controls","type":"text","marks":[{"type":"strong"}]},{"text":": Sandbox awareness, permission tiers","type":"text"}]}]}]},{"type":"hr","attrs":{"markup":"---"}},{"type":"heading","attrs":{"level":2},"content":[{"text":"2. Core Responsibilities","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"2.1 Core Principles","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"TDD First","type":"text","marks":[{"type":"strong"}]},{"text":": Write tests before implementation - verify permission checks, element queries, and actions work correctly","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Performance Aware","type":"text","marks":[{"type":"strong"}]},{"text":": Cache elements, limit search scope, batch attribute queries for optimal responsiveness","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Security First","type":"text","marks":[{"type":"strong"}]},{"text":": Validate TCC permissions, verify code signatures, block sensitive applications","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Audit Everything","type":"text","marks":[{"type":"strong"}]},{"text":": Log all operations with correlation IDs for security audit trails","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"2.2 Safe Automation Principles","type":"text"}]},{"type":"paragraph","content":[{"text":"When performing accessibility automation:","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Validate TCC permissions","type":"text","marks":[{"type":"strong"}]},{"text":" before any operation","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Respect sandbox boundaries","type":"text","marks":[{"type":"strong"}]},{"text":" of target applications","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Block sensitive applications","type":"text","marks":[{"type":"strong"}]},{"text":" (Keychain, Security preferences)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Log all operations","type":"text","marks":[{"type":"strong"}]},{"text":" for audit trails","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Implement timeouts","type":"text","marks":[{"type":"strong"}]},{"text":" to prevent hangs","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"2.3 Permission Management","type":"text"}]},{"type":"paragraph","content":[{"text":"All automation must:","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Check for Accessibility permission in TCC database","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Validate process has required entitlements","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Request minimal necessary permissions","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Handle permission denial gracefully","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"2.4 Security-First Approach","type":"text"}]},{"type":"paragraph","content":[{"text":"Every automation operation MUST:","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Verify target application identity","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Check against blocked application list","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Validate TCC permissions","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Log operation with correlation ID","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Enforce timeout limits","type":"text"}]}]}]},{"type":"hr","attrs":{"markup":"---"}},{"type":"heading","attrs":{"level":2},"content":[{"text":"3. Technical Foundation","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"3.1 Core Frameworks","type":"text"}]},{"type":"paragraph","content":[{"text":"Primary Framework","type":"text","marks":[{"type":"strong"}]},{"text":": ApplicationServices / HIServices","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Key API","type":"text","marks":[{"type":"strong"}]},{"text":": AXUIElementRef (CFType-based accessibility element)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Observer API","type":"text","marks":[{"type":"strong"}]},{"text":": AXObserver for event monitoring","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Attribute API","type":"text","marks":[{"type":"strong"}]},{"text":": AXUIElementCopyAttributeValue","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Key Dependencies","type":"text","marks":[{"type":"strong"}]},{"text":":","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":""},"content":[{"text":"ApplicationServices.framework # Core accessibility APIs\nCoreFoundation.framework # CFType support\nAppKit.framework # NSRunningApplication\nSecurity.framework # TCC queries","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"3.2 Essential Libraries","type":"text"}]},{"type":"table","attrs":{"layout":null},"content":[{"type":"tr","content":[{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Library","type":"text"}]}]},{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Purpose","type":"text"}]}]},{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Security Notes","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"pyobjc-framework-ApplicationServices","type":"text","marks":[{"type":"code_inline"}]}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Python bindings","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Validate element access","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"atomac","type":"text","marks":[{"type":"code_inline"}]}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Higher-level wrapper","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Check TCC before use","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"pyautogui","type":"text","marks":[{"type":"code_inline"}]}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Input simulation","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Requires Accessibility permission","type":"text"}]}]}]}]},{"type":"hr","attrs":{"markup":"---"}},{"type":"heading","attrs":{"level":2},"content":[{"text":"4. Implementation Patterns","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Pattern 1: TCC Permission Validation","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"python"},"content":[{"text":"import subprocess\nfrom ApplicationServices import (\n AXIsProcessTrustedWithOptions,\n kAXTrustedCheckOptionPrompt\n)\n\nclass TCCValidator:\n \"\"\"Validate TCC permissions before automation.\"\"\"\n\n @staticmethod\n def check_accessibility_permission(prompt: bool = False) -> bool:\n \"\"\"Check if process has accessibility permission.\"\"\"\n options = {kAXTrustedCheckOptionPrompt: prompt}\n return AXIsProcessTrustedWithOptions(options)\n\n @staticmethod\n def get_tcc_status(bundle_id: str) -> str:\n \"\"\"Query TCC database for permission status.\"\"\"\n query = f\"\"\"\n SELECT client, auth_value FROM access\n WHERE service = 'kTCCServiceAccessibility'\n AND client = '{bundle_id}'\n \"\"\"\n # Note: Direct TCC database access requires SIP disabled\n # Use AXIsProcessTrusted for normal operation\n pass\n\n def ensure_permission(self):\n \"\"\"Ensure accessibility permission is granted.\"\"\"\n if not self.check_accessibility_permission():\n raise PermissionError(\n \"Accessibility permission required. \"\n \"Enable in System Preferences > Security & Privacy > Accessibility\"\n )","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Pattern 2: Secure Element Discovery","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"python"},"content":[{"text":"from ApplicationServices import (\n AXUIElementCreateSystemWide,\n AXUIElementCreateApplication,\n AXUIElementCopyAttributeValue,\n AXUIElementCopyAttributeNames,\n)\nfrom Quartz import kAXErrorSuccess\nimport logging\n\nclass SecureAXAutomation:\n \"\"\"Secure wrapper for AXUIElement automation.\"\"\"\n\n BLOCKED_APPS = {\n 'com.apple.keychainaccess', # Keychain Access\n 'com.apple.systempreferences', # System Preferences\n 'com.apple.SecurityAgent', # Security dialogs\n 'com.apple.Terminal', # Terminal\n 'com.1password.1password', # 1Password\n }\n\n def __init__(self, permission_tier: str = 'read-only'):\n self.permission_tier = permission_tier\n self.logger = logging.getLogger('ax.security')\n self.operation_timeout = 30\n\n # Validate TCC permission on init\n if not TCCValidator.check_accessibility_permission():\n raise PermissionError(\"Accessibility permission required\")\n\n def get_application_element(self, pid: int) -> 'AXUIElementRef':\n \"\"\"Get application element with validation.\"\"\"\n # Get bundle ID\n bundle_id = self._get_bundle_id(pid)\n\n # Security check\n if bundle_id in self.BLOCKED_APPS:\n self.logger.warning(\n 'blocked_app_access',\n bundle_id=bundle_id,\n reason='security_policy'\n )\n raise SecurityError(f\"Access to {bundle_id} is blocked\")\n\n # Create element\n app_element = AXUIElementCreateApplication(pid)\n\n self._audit_log('app_element_created', bundle_id, pid)\n return app_element\n\n def get_attribute(self, element, attribute: str):\n \"\"\"Get element attribute with security filtering.\"\"\"\n sensitive = ['AXValue', 'AXSelectedText', 'AXDocument']\n if attribute in sensitive and self.permission_tier == 'read-only':\n raise SecurityError(f\"Access to {attribute} requires elevated permissions\")\n\n error, value = AXUIElementCopyAttributeValue(element, attribute, None)\n if error != kAXErrorSuccess:\n return None\n\n # Redact password values\n return '[REDACTED]' if 'password' in str(attribute).lower() else value\n\n def _audit_log(self, action: str, bundle_id: str, pid: int):\n self.logger.info(f'ax.{action}', extra={\n 'bundle_id': bundle_id, 'pid': pid, 'permission_tier': self.permission_tier\n })","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Pattern 3: Safe Action Execution","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"python"},"content":[{"text":"from ApplicationServices import AXUIElementPerformAction\n\nclass SafeActionExecutor:\n \"\"\"Execute AX actions with security controls.\"\"\"\n BLOCKED_ACTIONS = {\n 'read-only': ['AXPress', 'AXIncrement', 'AXDecrement', 'AXConfirm'],\n 'standard': ['AXDelete', 'AXCancel'],\n }\n\n def __init__(self, permission_tier: str):\n self.permission_tier = permission_tier\n\n def perform_action(self, element, action: str):\n blocked = self.BLOCKED_ACTIONS.get(self.permission_tier, [])\n if action in blocked:\n raise PermissionError(f\"Action {action} not allowed in {self.permission_tier} tier\")\n error = AXUIElementPerformAction(element, action)\n return error == kAXErrorSuccess","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Pattern 4: Application Monitoring","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"python"},"content":[{"text":"from AppKit import NSWorkspace, NSRunningApplication\n\nclass ApplicationMonitor:\n \"\"\"Monitor and validate running applications.\"\"\"\n\n def get_frontmost_app(self) -> dict:\n app = NSWorkspace.sharedWorkspace().frontmostApplication()\n return {\n 'pid': app.processIdentifier(),\n 'bundle_id': app.bundleIdentifier(),\n 'name': app.localizedName(),\n }\n\n def validate_application(self, pid: int) -> bool:\n app = NSRunningApplication.runningApplicationWithProcessIdentifier_(pid)\n if not app or app.bundleIdentifier() in SecureAXAutomation.BLOCKED_APPS:\n return False\n # Verify code signature\n result = subprocess.run(['codesign', '-v', app.bundleURL().path()], capture_output=True)\n return result.returncode == 0","type":"text"}]},{"type":"hr","attrs":{"markup":"---"}},{"type":"heading","attrs":{"level":2},"content":[{"text":"5. Implementation Workflow (TDD)","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Step 1: Write Failing Test First","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"python"},"content":[{"text":"# tests/test_ax_automation.py\nimport pytest\nfrom unittest.mock import patch, MagicMock\n\nclass TestTCCValidation:\n def test_raises_error_when_permission_missing(self):\n with patch('ApplicationServices.AXIsProcessTrustedWithOptions', return_value=False):\n with pytest.raises(PermissionError) as exc:\n SecureAXAutomation()\n assert \"Accessibility permission required\" in str(exc.value)\n\nclass TestSecureElementDiscovery:\n def test_blocks_keychain_access(self):\n with patch('ApplicationServices.AXIsProcessTrustedWithOptions', return_value=True):\n automation = SecureAXAutomation()\n with pytest.raises(SecurityError):\n automation.get_application_element(pid=1234) # Keychain PID\n\n def test_filters_sensitive_attributes(self):\n automation = SecureAXAutomation(permission_tier='read-only')\n result = automation.get_attribute(MagicMock(), 'AXPasswordField')\n assert result == '[REDACTED]'\n\nclass TestActionExecution:\n def test_blocks_actions_in_readonly_tier(self):\n executor = SafeActionExecutor(permission_tier='read-only')\n with pytest.raises(PermissionError):\n executor.perform_action(MagicMock(), 'AXPress')","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Step 2: Implement Minimum to Pass","type":"text"}]},{"type":"paragraph","content":[{"text":"Implement the classes and methods that make tests pass.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Step 3: Refactor Following Patterns","type":"text"}]},{"type":"paragraph","content":[{"text":"Apply security patterns, caching, and error handling.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Step 4: Run Full Verification","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"# Run all tests with coverage\npytest tests/ -v --cov=ax_automation --cov-report=term-missing\n\n# Run security-specific tests\npytest tests/test_ax_automation.py -k \"security or permission\" -v\n\n# Run with timeout to catch hangs\npytest tests/ --timeout=30","type":"text"}]},{"type":"hr","attrs":{"markup":"---"}},{"type":"heading","attrs":{"level":2},"content":[{"text":"6. Performance Patterns","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Pattern 1: Element Caching","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"python"},"content":[{"text":"# BAD: Query repeatedly\nelement = AXUIElementCreateApplication(pid) # Each call\n\n# GOOD: Cache with TTL\nclass ElementCache:\n def __init__(self, ttl=5.0):\n self.cache, self.ttl = {}, ttl\n\n def get_or_create(self, pid, role):\n key = (pid, role)\n if key in self.cache and time() - self.cache[key][1] \u003c self.ttl:\n return self.cache[key][0]\n element = self._create_element(pid, role)\n self.cache[key] = (element, time())\n return element","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Pattern 2: Scope Limiting","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"python"},"content":[{"text":"# BAD: Search entire hierarchy\nfind_all_children(app_element, role='AXButton') # Deep search\n\n# GOOD: Limit depth\ndef find_button(element, max_depth=3, depth=0, results=None):\n if results is None: results = []\n if depth > max_depth: return results\n if get_attribute(element, 'AXRole') == 'AXButton':\n results.append(element)\n else:\n for child in get_attribute(element, 'AXChildren') or []:\n find_button(child, max_depth, depth+1, results)\n return results","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Pattern 3: Async Queries","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"python"},"content":[{"text":"# BAD: Sequential blocking\nfor app in apps: windows.extend(get_windows(app))\n\n# GOOD: Concurrent with ThreadPoolExecutor\nasync def get_all_windows_async():\n with ThreadPoolExecutor(max_workers=4) as executor:\n tasks = [loop.run_in_executor(executor, get_windows, app) for app in apps]\n results = await asyncio.gather(*tasks)\n return [w for wins in results for w in wins]","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Pattern 4: Attribute Batching","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"python"},"content":[{"text":"# BAD: Multiple calls\ntitle = AXUIElementCopyAttributeValue(element, 'AXTitle', None)\nrole = AXUIElementCopyAttributeValue(element, 'AXRole', None)\n\n# GOOD: Batch query\nerror, values = AXUIElementCopyMultipleAttributeValues(\n element, ['AXTitle', 'AXRole', 'AXPosition', 'AXSize'], None\n)\ninfo = dict(zip(attributes, values)) if error == kAXErrorSuccess else {}","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Pattern 5: Observer Optimization","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"python"},"content":[{"text":"# BAD: Observer for every notification without debounce\n\n# GOOD: Selective observers with debouncing\nclass OptimizedObserver:\n def __init__(self, app_element, notifications):\n self.last_callback, self.debounce_ms = {}, 100\n for notif in notifications:\n add_observer(app_element, notif, self._debounced_callback)\n\n def _debounced_callback(self, notification, element):\n now = time() * 1000\n if now - self.last_callback.get(notification, 0) \u003c self.debounce_ms:\n return\n self.last_callback[notification] = now\n self._handle_notification(notification, element)","type":"text"}]},{"type":"hr","attrs":{"markup":"---"}},{"type":"heading","attrs":{"level":2},"content":[{"text":"7. Security Standards","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"7.1 Critical Vulnerabilities","type":"text"}]},{"type":"table","attrs":{"layout":null},"content":[{"type":"tr","content":[{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"CVE/CWE","type":"text"}]}]},{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Severity","type":"text"}]}]},{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text"}]}]},{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Mitigation","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"CVE-2023-32364","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"CRITICAL","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"TCC bypass via symlinks","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Update macOS, validate paths","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"CVE-2023-28206","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"HIGH","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"AX privilege escalation","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Process validation, code signing","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"CWE-290","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"HIGH","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Bundle ID spoofing","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Verify code signature","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"CWE-74","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"HIGH","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Input injection via AX","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Block SecurityAgent","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"CVE-2022-42796","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"MEDIUM","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Hardened runtime bypass","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Verify target app runtime","type":"text"}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"7.2 OWASP Mapping","type":"text"}]},{"type":"table","attrs":{"layout":null},"content":[{"type":"tr","content":[{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"OWASP","type":"text"}]}]},{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Risk","type":"text"}]}]},{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Mitigation","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"A01 Broken Access","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"CRITICAL","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"TCC validation, blocklists","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"A02 Misconfiguration","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"HIGH","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Minimal permissions","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"A05 Injection","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"HIGH","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Input validation","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"A07 Auth Failures","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"HIGH","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Code signature verification","type":"text"}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"7.3 Permission Tier Model","type":"text"}]},{"type":"table","attrs":{"layout":null},"content":[{"type":"tr","content":[{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Tier","type":"text"}]}]},{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Attributes","type":"text"}]}]},{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Actions","type":"text"}]}]},{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Timeout","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"read-only","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"AXTitle, AXRole, AXChildren","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"None","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"30s","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"standard","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"All","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"AXPress, AXIncrement","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"60s","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"elevated","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"All","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"All (except SecurityAgent)","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"120s","type":"text"}]}]}]}]},{"type":"hr","attrs":{"markup":"---"}},{"type":"heading","attrs":{"level":2},"content":[{"text":"8. Common Mistakes","type":"text"}]},{"type":"paragraph","content":[{"text":"Critical Anti-Patterns","type":"text","marks":[{"type":"strong"}]},{"text":" - Always avoid:","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Automating without TCC permission check","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Trusting bundle ID alone (verify code signature)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Accessing security dialogs (SecurityAgent, Keychain)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"No timeout on AX operations (can hang indefinitely)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Caching elements without TTL (elements become stale)","type":"text"}]}]}]},{"type":"hr","attrs":{"markup":"---"}},{"type":"heading","attrs":{"level":2},"content":[{"text":"9. Pre-Implementation Checklist","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Phase 1: Before Writing Code","type":"text"}]},{"type":"checkbox_list","attrs":{"id":null},"content":[{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"TCC permission requirements documented","type":"text"}]}]},{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"Target applications identified and validated against blocklist","type":"text"}]}]},{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"Permission tier determined (read-only/standard/elevated)","type":"text"}]}]},{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"Test cases written for permission validation","type":"text"}]}]},{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"Test cases written for element discovery","type":"text"}]}]},{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"Test cases written for action execution","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Phase 2: During Implementation","type":"text"}]},{"type":"checkbox_list","attrs":{"id":null},"content":[{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"TCC permission validation implemented","type":"text"}]}]},{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"Application blocklist configured","type":"text"}]}]},{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"Code signature verification enabled","type":"text"}]}]},{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"Permission tier system enforced","type":"text"}]}]},{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"Audit logging enabled","type":"text"}]}]},{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"Timeout enforcement on all operations","type":"text"}]}]},{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"Element caching implemented for performance","type":"text"}]}]},{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"Attribute batching used where applicable","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Phase 3: Before Committing","type":"text"}]},{"type":"checkbox_list","attrs":{"id":null},"content":[{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"All TDD tests pass: ","type":"text"},{"text":"pytest tests/ -v","type":"text","marks":[{"type":"code_inline"}]}]}]},{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"Security tests pass: ","type":"text"},{"text":"pytest -k \"security or permission\"","type":"text","marks":[{"type":"code_inline"}]}]}]},{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"No blocked application access possible","type":"text"}]}]},{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"Timeout handling verified","type":"text"}]}]},{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"Tested on target macOS versions","type":"text"}]}]},{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"Sandbox compatibility verified","type":"text"}]}]},{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"Hardened runtime compatibility checked","type":"text"}]}]},{"type":"checkbox_item","attrs":{"checked":false},"content":[{"type":"paragraph","content":[{"text":"Code coverage meets threshold: ","type":"text"},{"text":"pytest --cov --cov-fail-under=80","type":"text","marks":[{"type":"code_inline"}]}]}]}]},{"type":"hr","attrs":{"markup":"---"}},{"type":"heading","attrs":{"level":2},"content":[{"text":"10. Summary","type":"text"}]},{"type":"paragraph","content":[{"text":"Your goal is to create macOS accessibility automation that is:","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Secure","type":"text","marks":[{"type":"strong"}]},{"text":": TCC validation, code signature verification, application blocklists","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Reliable","type":"text","marks":[{"type":"strong"}]},{"text":": Proper error handling, timeout enforcement","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Compliant","type":"text","marks":[{"type":"strong"}]},{"text":": Respects macOS security model and sandbox boundaries","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Security Reminders","type":"text","marks":[{"type":"strong"}]},{"text":":","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Always validate TCC permissions before automation","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Verify code signatures, not just bundle IDs","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Never automate security dialogs or Keychain","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Log all operations with correlation IDs","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Respect macOS security boundaries","type":"text"}]}]}]},{"type":"hr","attrs":{"markup":"---"}},{"type":"heading","attrs":{"level":2},"content":[{"text":"References","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Advanced Patterns","type":"text","marks":[{"type":"strong"}]},{"text":": See ","type":"text"},{"text":"references/advanced-patterns.md","type":"text","marks":[{"type":"code_inline"}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Security Examples","type":"text","marks":[{"type":"strong"}]},{"text":": See ","type":"text"},{"text":"references/security-examples.md","type":"text","marks":[{"type":"code_inline"}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Threat Model","type":"text","marks":[{"type":"strong"}]},{"text":": See ","type":"text"},{"text":"references/threat-model.md","type":"text","marks":[{"type":"code_inline"}]}]}]}]},{"type":"hr","attrs":{"markup":"---"}}]},"metadata":{"date":"2026-06-05","name":"macos-accessibility","model":"sonnet","author":"@skillopedia","source":{"stars":38,"repo_name":"claude-skills-generator","origin_url":"https://github.com/martinholovsky/claude-skills-generator/blob/HEAD/skills/macos-accessibility/SKILL.md","repo_owner":"martinholovsky","body_sha256":"01acc07a39744db58adf857141914c75548ce6e6852b1bafe845c1bcd95e23fb","cluster_key":"d357bfd7a19d0b49d48fd5351ed8d3f9c9e7cf03a9b7e7cb0b7da0710f0fb215","clean_bundle":{"format":"clean-skill-bundle-v1","source":"martinholovsky/claude-skills-generator/skills/macos-accessibility/SKILL.md","attachments":[{"id":"ac45ed46-5054-5dca-abf2-6d56092c1fc8","key":"uploads/10433ee7-ad12-4ae0-b34e-97553e46c6c8/ac45ed46-5054-5dca-abf2-6d56092c1fc8/attachment.md","path":"references/advanced-patterns.md","size":3398,"sha256":"3648e84b64c5e14b8d5531e1ff3b20c0723dcfd67967dab747b0156c6d0532a4","contentType":"text/markdown; charset=utf-8"},{"id":"d1c746c1-9018-5b5e-b1ad-ba1567f3f79c","key":"uploads/10433ee7-ad12-4ae0-b34e-97553e46c6c8/d1c746c1-9018-5b5e-b1ad-ba1567f3f79c/attachment.md","path":"references/security-examples.md","size":3222,"sha256":"82f2dd1bc6641d715d305ea9f565a71406867db100e195e6e6a5cd2789073328","contentType":"text/markdown; charset=utf-8"},{"id":"6dbe843e-af2c-5290-9bbe-1413eb7ef5b6","key":"uploads/10433ee7-ad12-4ae0-b34e-97553e46c6c8/6dbe843e-af2c-5290-9bbe-1413eb7ef5b6/attachment.md","path":"references/threat-model.md","size":2560,"sha256":"929ccd53f00d20c519c7870823156c7fb2f8942692e9b143b11cfdfc2b83131b","contentType":"text/markdown; charset=utf-8"}],"bundle_sha256":"ece9a3921c2fa10adc0c148bc9e0c3c490e802a6a25072465e9bd5e51a5d5c2e","attachment_count":3,"text_attachments":3,"attachment_storage":"skillopedia-attachments-v1","binary_attachments":0,"excluded_attachments":[]},"cluster_size":1,"skill_md_path":"skills/macos-accessibility/SKILL.md","import_metadata":{"date":"2026-06-05","author":"@skillopedia","version":"v1","category":"security","category_label":"Security"},"exact_dupes_collapsed_into_this":0},"version":"v1","category":"security","import_tag":"clean-skills-v1","risk_level":"MEDIUM","description":"Expert in macOS Accessibility APIs (AXUIElement) for desktop automation. Specializes in secure automation of macOS applications with proper TCC permissions, element discovery, and system interaction. HIGH-RISK skill requiring strict security controls."}},"renderedAt":1782986959492}

Important: agents should read /llm.txt, /llms.txt, or /.well-known/skills.json to discover the public Skillopedia API.