Tasker.lppsa Online
The "secure": true property is the heart of the LPP contract. When set, Tasker will not expose this action to the standard "Plugin Action" picker unless the device meets specific security criteria (e.g., rooted, ADB debugging enabled, or using a custom ROM with signature spoofing). This prevents malicious apps from invoking high-risk actions via social engineering.
| Feature | Native Tasker | Tasker + LPP-SA | | :--- | :--- | :--- | | Simulated Clicks | Limited (Accessibility) | Advanced (Coordinate & UI element based) | | System Property Modification | Requires root | Possible with sh/root via Lua | | Complex Loops/Logic | Tasker Variables/Loops | Full Lua programming language | | File Manipulation | Basic (Read/Write) | Advanced (Regex, binary parsing) | | UI Element Reading | AutoInput plugin needed | Native Lua functions | tasker.lppsa
If you want to harness tasker.lppsa, you cannot simply type that keyword into Tasker. You need to build the bridge. Follow this step-by-step guide. The "secure": true property is the heart of
To the untrained eye, a .lppsa file appears as a simple JSON structure or a binary serialized object. In truth, it is a manifest of permissions and capabilities. When Tasker encounters this file within the plugin’s assets directory (/assets/tasker/), it parses the following core sections: "version": "3
"version": "3.2",
"package": "com.example.secureplugin",
"actions": [
"code": "SHELL_EXEC",
"label": "Execute Shell Command",
"description": "Runs a privileged shell command via root or ADB",
"input": ["command", "timeout_ms"],
"output": ["stdout", "stderr", "exit_code"],
"secure": true,
"requires": ["ROOT", "NO_GUI"]
,
"code": "GESTURE_INJECT",
"label": "Inject Multi-touch Gesture",
"description": "Simulate touch events bypassing accessibility delay",
"input": ["path_points", "duration_ms", "pressure"],
"output": ["success", "error_message"],
"secure": true,
"requires": ["INPUT_INJECT"]
],
"settings":
"log_level": "verbose",
"fallback_to_intent": false,
"async_timeout": 5000
,
"signatures":
"hash": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
While Tasker can read the accelerometer, complex filtering (like FFT for sound or Kalman filters for motion) is beyond its variable system. Lua, being a full programming language, can process arrays of sensor data. tasker.lppsa allows you to pipe raw sensor data from Tasker variables into a Lua script, process it, and return an actionable result (e.g., "Phone fell" -> Trigger alarm).
When Tasker launches (or when a plugin is updated), it scans all installed packages for tasker.lppsa. Upon finding one, it initiates a three-step handshake: