A vulnerability in OpenClaw's Skill Workshop apply flow allows an agent tool call to override a pending approval state, applying changes before the expected approval step. This affects versions prior to 2026.5.6. The issue does not alter OpenClaw's trusted-operator model but can lead to unintended application of workshop changes depending on configuration and input trust levels. The vulnerability has moderate severity and no known exploits in the wild. Manual review of Skill Workshop changes and restricting tool access are recommended until the patch is applied.