Currently, the commands feature of custom items are not so great: they rely on the server admin to ensure players have the right permissions, and nothing prevents players from executing these commands without holding the custom item in their hand. We should rework this system and turn it into something better. For instance, we could use things like the /execute command to work around the op problem. Or we could even give players op briefly (but make sure not to destroy permissions when doing that...)

It could also be interesting to add support for commands on more events. Someone made this list as inspiration:
https://rentry.co/EventSuggestions1