OmniPermission (Human-in-the-Loop)

Human-in-the-loop: A free, extensible framework for intercepting tool calls via the OmniPersona mobile app.

This plugin does what it claims (it intercepts tool calls and asks a mobile app for approval), but you should verify a few things before installing: 1) Confirm the backend domain (backend.ecrop.de) and the mobile app publisher are trustworthy and match the project you expect (the README links to GitHub/Apple/Play but the backend host is a different domain). 2) Understand that your OmniPersona secret key is stored in plaintext under the plugin state directory — treat it like a sensitive credential and ensure proper filesystem permissions/backups. 3) If you allow agents CLI access, they could change the plugin's blacklist or disable protections; run agents in a restricted environment if you need strong guarantees. 4) If you fork or modify the plugin to include richer context (agent reasoning, project IDs), be aware that this increases the data sent to the external backend. If you need higher assurance, ask the maintainer for an audit of the backend service, run the plugin against a local or self-hosted backend, or review the mobile app's privacy/security posture before entering your key.

Type: OpenClaw Skill Name: omnipermission Version: 1.0.2 The OmniPermission plugin is a legitimate security tool designed to provide human-in-the-loop governance for OpenClaw agents. It intercepts blacklisted tool calls via the 'before_tool_call' hook and requires manual approval through a mobile app (OmniPersona). The code handles a user-provided secret key and communicates with a dedicated backend (backend.ecrop.de) to facilitate push notifications, which is consistent with its stated purpose. No evidence of malicious intent, data exfiltration beyond the necessary service communication, or obfuscation was found.