App automation is a macOS permission that allows one app to control another app after the user approves the request. Technically, it is part of macOS’s automation and privacy controls, and it can let software send actions, read interface state, open files, or trigger menu commands in another application.
In cybersecurity, this matters because automation turns a trusted app into a powerful relay. If malware gains a foothold on a Mac and obtains automation access, it may be able to change settings, redirect workflows, or move data through apps the user already trusts. Defenders should treat automation permissions as sensitive, review which apps have access, revoke anything unnecessary, and apply least privilege so a single approval does not become a broad control path.