Automation permission is a macOS privacy control that lets one app send commands to another app or certain system functions. It is part of Apple’s consent model for app-to-app control, and it is separate from simple file access or screen recording. When granted, the controlling app can open windows, click buttons, fill fields, or trigger actions inside another app on the user’s behalf.
This matters in cyber security because automation rights can turn a helpful tool into a powerful operator. If an attacker tricks a user into approving access, or if a trusted app is abused through prompt injection or malicious content, the app may be able to send unwanted commands in a logged-in session. Defenders should treat these prompts as sensitive privileges, review granted automation rights regularly, and limit them to tasks that truly need cross-app control. In practice, automation permission is often the boundary that decides whether an assistant can merely suggest an action or actually perform it.