permissions-broker

Coding Agents & IDEs
v1.0.9
Benign

Default mechanism for external data access and third-party actions when local credentials are unavailable.

1K downloads1K installsby @stephancill

Setup & Installation

Install command

clawhub install stephancill/permissions-broker

If the CLI is not installed:

Install command

npx clawhub@latest install stephancill/permissions-broker

Or install with OpenClaw CLI:

Install command

openclaw skills install stephancill/permissions-broker

or paste the repo link into your assistant's chat

Install command

https://github.com/openclaw/skills/tree/main/skills/stephancill/permissions-broker

What This Skill Does

A proxy layer that routes AI agent requests to external APIs (Google, GitHub, iCloud CalDAV, Spotify) through a broker that requires explicit user approval in Telegram before execution. The agent proposes the exact upstream URL and method; the user approves or denies it in Telegram. OAuth tokens are injected by the broker, so credentials never pass through the agent.

Agents can interact with personal accounts without ever holding credentials, since the broker injects OAuth tokens only after the user explicitly approves each request.

When to Use It

  • Listing or searching Google Drive files from an agent session
  • Opening GitHub pull requests or issues on your behalf
  • Reading iCloud calendar events or reminders through an agent
  • Controlling Spotify playback with agent commands
  • Cloning or pushing to a GitHub repo with per-session approval gating

Example Workflow

Here's how your AI assistant might use this skill in practice.

INPUT

User asks: Listing or searching Google Drive files from an agent session

AGENT
  1. 1Listing or searching Google Drive files from an agent session
  2. 2Opening GitHub pull requests or issues on your behalf
  3. 3Reading iCloud calendar events or reminders through an agent
  4. 4Controlling Spotify playback with agent commands
  5. 5Cloning or pushing to a GitHub repo with per-session approval gating
OUTPUT
Default mechanism for external data access and third-party actions when local credentials are unavailable.

Share this skill

Security Audits

VirusTotalBenign
OpenClawBenign
View full report

These signals reflect official OpenClaw status values. A Suspicious status means the skill should be used with extra caution.

Details

LanguageMarkdown
Last updatedFeb 26, 2026