A tamper-evident audit trail that records and verifies every workspace change in a hash-chained log for AI agents.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install openclaw-ledger
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install openclaw-ledger using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is OpenClaw Ledger?
OpenClaw Ledger provides a robust, verifiable record of all activities within an AI agent's workspace. By utilizing a hash-chained logging mechanism, it ensures that any modifications, command executions, or skill installations leave a permanent and tamper-evident trail. This is essential for developers using Openclaw Skills who need to maintain accountability and transparency in agent-driven workflows.
The tool is designed to solve the problem of silent or untraceable modifications by agents. By recording state snapshots and linking them through cryptographic hashes, the system guarantees that if any historical entry is altered, the chain breaks, immediately alerting the user to potential tampering or corruption. This ensures that your local environment remains secure and audit-ready at all times.
OpenClaw Ledger Use Cases
- Monitoring autonomous agents to ensure no unauthorized file modifications occur.
- Debugging agent behavior by reviewing a verifiable chronological log of workspace changes.
- Maintaining audit compliance for organizations using Openclaw Skills and AI-driven development tools.
- Verifying the integrity of logs when sharing agent workspaces across different teams or machines.
- Securing automated workflows against silent failures or malicious injections by external actors.
How OpenClaw Ledger Works
- The system initializes a ledger and takes a cryptographic snapshot of the current workspace state to establish a baseline.
- Every subsequent workspace change or manual trigger is recorded as a new entry in the log.
- Each entry includes a timestamp, the SHA-256 hash of the previous entry, and specific event data describing the changes.
- The verify command recalculates the entire hash chain from the origin to ensure logical continuity and data integrity.
- If any entry has been modified, deleted, or inserted out of order, the chain verification fails, providing a clear signal of tampering.
OpenClaw Ledger Setup
Ensure you have Python 3 installed on your system. This skill requires no external dependencies or network calls, making it ideal for secure Openclaw Skills environments.
Initialize the ledger in your workspace:
python3 {baseDir}/scripts/ledger.py init --workspace /path/to/workspace
Record a manual entry or update the state:
python3 {baseDir}/scripts/ledger.py record -m "Installed new skill" --workspace /path/to/workspace
Verify the integrity of your audit trail:
python3 {baseDir}/scripts/ledger.py verify --workspace /path/to/workspace
OpenClaw Ledger Data Schema & Taxonomy
The ledger organizes data in a hash-chained structure to ensure cryptographic integrity. Each entry consists of the following metadata:
| Field | Description |
|---|---|
| Timestamp | ISO 8601 formatted time of recording |
| Previous Hash | SHA-256 hash of the preceding entry in the chain |
| Event Type | Category of change (e.g., file change, snapshot, init) |
| Data | Specific details about the workspace modification |
| Exit Codes | 0 (Clean), 1 (Missing/Issues), 2 (Tampered/Corrupt) |
OpenClaw Ledger Advanced Features
- Native support for cross-platform environments including macOS, Linux, and Windows 32/64.
- Integration compatibility with Openclaw Skills, Claude Code, and Cursor for unified audit logging.
- Zero-dependency architecture using only the Python standard library for maximum portability and security.
- Detailed log inspection with configurable entry limits via the -n flag for large workspaces.
- Real-time status reporting for quick health checks of the workspace chain without full verification.
SKILL.md
Loading
Related Openclaw Skills
Context Optimizer
An intelligent context compression engine that reduces token costs by up to 60% through pruning, deduplication, and summarization.
OpenClaw Security Action
A specialized GitHub Action that automatically scans agent workspaces and Openclaw Skills for security vulnerabilities like exposed secrets and prompt injection.
stripfeed
stripfeed is a specialized utility that fetches web content and converts it into clean, AI-optimized Markdown while providing precise token counts.
Insecure Defaults Detection
Identify and remediate fail-open vulnerabilities, hardcoded secrets, and permissive security settings before they reach production.
OpenClaw Memory
A persistent memory layer that enables AI agents to remember facts, preferences, and context across sessions using semantic search and autonomous payments.
Smart Router
An automated model selection engine that routes AI requests based on complexity analysis and budget constraints to maximize cost efficiency.