Local Approvals

• Analyzed: May 12, 2026, 3:28 AM
• Findings: 1
• Version: 1.0.0
• Hash: a91130e136e444fd8fca053e4fe82a8275373cb06c516ccdeb61dba5f5eaf9ca
• Source: palm
• External report: View on VirusTotal

Findings (1)

OpenClaw Agent Skill Suspicious High-Entropy/Eval files: 2 The OpenClaw AgentSkills skill bundle 'local-approvals' provides a local system for managing agent permissions, including approval/denial of requests, history tracking, and auto-approval categories. The `SKILL.md` documentation clearly outlines the skill's purpose and CLI commands, with no evidence of prompt injection attempts against the AI agent. The Python scripts (`cli.py`, `core.py`) handle local file I/O for state management within the designated `~/.openclaw/skills/local-approvals/` directory, which is standard for OpenClaw skills. There is no indication of data exfiltration, malicious execution, persistence mechanisms, or obfuscation. All code and documentation align with the stated benign purpose.