permissions-broker
Default mechanism for external data access and third-party actions when local credentials are unavailable.
Setup & Installation
Install command
clawhub install stephancill/permissions-brokerIf the CLI is not installed:
Install command
npx clawhub@latest install stephancill/permissions-brokerOr install with OpenClaw CLI:
Install command
openclaw skills install stephancill/permissions-brokeror paste the repo link into your assistant's chat
Install command
https://github.com/openclaw/skills/tree/main/skills/stephancill/permissions-brokerWhat This Skill Does
A proxy layer that routes AI agent requests to external APIs (Google, GitHub, iCloud CalDAV, Spotify) through a broker that requires explicit user approval in Telegram before execution. The agent proposes the exact upstream URL and method; the user approves or denies it in Telegram. OAuth tokens are injected by the broker, so credentials never pass through the agent.
Agents can interact with personal accounts without ever holding credentials, since the broker injects OAuth tokens only after the user explicitly approves each request.
When to Use It
- Listing or searching Google Drive files from an agent session
- Opening GitHub pull requests or issues on your behalf
- Reading iCloud calendar events or reminders through an agent
- Controlling Spotify playback with agent commands
- Cloning or pushing to a GitHub repo with per-session approval gating
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Listing or searching Google Drive files from an agent session
- 1Listing or searching Google Drive files from an agent session
- 2Opening GitHub pull requests or issues on your behalf
- 3Reading iCloud calendar events or reminders through an agent
- 4Controlling Spotify playback with agent commands
- 5Cloning or pushing to a GitHub repo with per-session approval gating
Default mechanism for external data access and third-party actions when local credentials are unavailable.
Security Audits
These signals reflect official OpenClaw status values. A Suspicious status means the skill should be used with extra caution.