Startup & Background Items
Everything that launches itself — list, enable, disable.
5 tools — 2 read-only, 3 that always ask your approval first.
Read-only tools never modify anything; anything that changes your Mac pauses on an Approve card first.
list_startup_items Read-onlyList the apps and background agents that launch at login (the LaunchAgents/LaunchDaemons plists), each with what its program's code signature says about its publisher — third-party (a verified publisher) or unknown publisher (ad-hoc, unsigned, a script).
disable_startup_item Asks firstDisable a login/startup item by name so it no longer launches at boot. Provide the item's label or filename.
enable_startup_item Asks firstRe-enable a previously disabled login/startup item so it launches at boot again (the undo of disable_startup_item). Provide the item's label or filename.
list_launch_services Read-onlyList the background launchd services currently loaded, with a count of non-Apple ones — judged by the program each job runs (its plist location and code signature), never by its label, and naming any job with an Apple-style label that runs non-Apple code. Complements list_startup_items (which covers login items).
disable_service Asks firstShut a remote-access door on this Mac. service = 'remote_login' (SSH), 'screen_sharing', 'remote_management' (ard), or 'file_sharing' (SMB). Needs admin.