Yeah there is a pneuma agent/app store for that. And security permissions are built in also. pneuma asks for approval for the different rights the agent needs before running.