Community Plugins

OmniLux supports community-built plugins that extend the platform with new features and integrations.

What are community plugins?

Community plugins follow the same plugin architecture as built-in plugins but are developed and maintained by third-party developers. They are not reviewed or endorsed by the OmniLux team.

Community developers can build plugins using the Plugin SDK. Users install plugins by providing a GitHub URL in the Plugin Manager.

Installing from GitHub

In the OmniLux web UI, go to Settings > Plugins > Install from URL and paste the repository URL.

Or use the CLI:

omnilux plugin install https://github.com/user/omnilux-plugin-name

Security considerations

WARNING

Community plugins are not reviewed by the OmniLux team. Before installing:

1. Read the source code — check what the plugin does, especially network calls and file access
2. Check the permissions — look at omnilux-plugin.json and verify the permissions make sense for what the plugin claims to do
3. Check the author — look at the author's other repositories and community reputation
4. Pin a specific version — don't auto-update community plugins without reviewing changes

Community plugins run inside OmniLux's permission sandbox, so they can only perform actions their declared permissions allow. Review permissions carefully before installing.

Reporting issues

If you find a security issue in a community plugin:

1. Report it to the plugin author via GitHub
2. If the author is unresponsive, report it on the OmniLux community forums so others are aware
3. Disable the plugin immediately if you suspect active exploitation