Mac's open command - too powerful

[Russ]

I don't actually recommend this because, as the title suggests, there's a potential security risk here if someone gets ahold of your password or token, but it's still pretty cool to play with and it solved this problem so I thought I'd post it as an example.

I added a command to my mac that runs the "open" command and enabled parameters.

Then I used the /triggercmd "slash command" with the TRIGGERcmd Slack app to open Finder to my desktop folder:

/triggercmd open on mac with ~/Desktop

Here's the dangerous bit: I also found I could run any arbitrary command on my mac.

For example I could also run calculator with this command:

/triggercmd open on mac with -a calculator

The "open" command is a little too powerful because it lets you run any command. So if you do this, don't give out your token or password to triggercmd.com (it's never a good idea to give those out anyway).

I warned you but in case you want to do it anyway:

• Use the GUI editor to add a command called open with open as the command, and enable parameters.

• Go here and click the Add to Slack button.

• Go to the Instructions page and copy your token.

• In Slack, run this slash command to link your Slack account with your TRIGGERcmd account:

     /triggercmd-token [paste your token here]
  

• Then run this slash command to test it:

     /triggercmd open on mac with ~/Desktop
  

• Profit.

If you just want to open Calculator, a safer Slack command would be this, which runs the built-in calculator command on your default computer.

/triggercmd calculator

[Felipe Martins]

how do i configure "my workspace" on slack?

[Russ]

@Felipe-Martins, log into your Slack workspace in a browser, then in the same browser, go here to add the TRIGGERcmd Slack app to your workspace:

https://www.triggercmd.com/user/auth/slack

If that doesn't answer your question, let me know and I'll elaborate, and add more details here.