Tamper-evident audit trail for agent workspaces. Every workspace change is recorded in a hash-chained log — if anyone alters an entry, the chain breaks and you know.
2 stars
0 votes
0 copies
0 views
Added November 11, 2026
ai-agentspythongobash
Works with
claude code
cursor
Security analysis
A92/100
mediumInstalls packages at runtime which could introduce malicious dependencies
Installs into .claude/skills of the current project.
Sponsors
SSkills DirectorySkills Directory
Know which skills are safe — weekly.
SSkills DirectorySkills Directory
Is that skill safe to install?
Are you the author of Openclaw Ledger?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/johnalbertini14-glitch-openclaw-ledger)
---
name: openclaw-ledger
user-invocable: true
metadata: {"openclaw":{"emoji":"📒","requires":{"bins":["python3"]},"os":["darwin","linux","win32"]}}
---
# OpenClaw Ledger
Tamper-evident audit trail for agent workspaces. Every workspace change is recorded in a hash-chained log — if anyone alters an entry, the chain breaks and you know.
## The Problem
Agents modify files, execute commands, install skills — and leave no verifiable record. If something goes wrong, you can't trace what happened. If logs exist, nothing proves they haven't been altered after the fact.
## Commands
### Initialize
Create the ledger and snapshot current workspace state.
```bash
python3 {baseDir}/scripts/ledger.py init --workspace /path/to/workspace
```
### Record Changes
Snapshot current state and log all changes since last record.
```bash
python3 {baseDir}/scripts/ledger.py record --workspace /path/to/workspace
python3 {baseDir}/scripts/ledger.py record -m "Installed new skill" --workspace /path/to/workspace
```
### Verify Chain
Verify the hash chain is intact — no entries tampered with.
```bash
python3 {baseDir}/scripts/ledger.py verify --workspace /path/to/workspace
```
### View Log
Show recent ledger entries.
```bash
python3 {baseDir}/scripts/ledger.py log --workspace /path/to/workspace
python3 {baseDir}/scripts/ledger.py log -n 20 --workspace /path/to/workspace
```
### Quick Status
```bash
python3 {baseDir}/scripts/ledger.py status --workspace /path/to/workspace
```
## How It Works
Each entry contains:
- Timestamp
- SHA-256 hash of the previous entry
- Event type and data (file changes, snapshots)
If any entry is modified, inserted, or deleted, the hash chain breaks and `verify` detects it.
## Exit Codes
- `0` — Clean / chain intact
- `1` — No ledger or minor issues
- `2` — Chain tampered / corrupt entries
## No External Dependencies
Python standard library only. No pip install. No network calls. Everything runs locally.
## Cross-Platform
Works with OpenClaw, Claude Code, Cursor, and any tool using the Agent Skills specification.
