Run any Skill in Manus with one click

opch-approvals

Exec approvals — when Op runs a host command not on the allowlist, OpenClaw may prompt; use Control UI or chat to allow/deny.

Run Skill in Manus

Overview

Exec approvals — when Op runs a host command not on the allowlist, OpenClaw may prompt; use Control UI or chat to allow/deny.

Install command

npx skills add https://github.com/mere/op-and-chloe --skill opch-approvals

Copy and paste this command into Claude Code to install the skill

Source

mere/op-and-chloe

Stars22

Forks3

UpdatedFebruary 22, 2026 at 19:23

SKILL.md

readonly

name	opch-approvals
description	Exec approvals — when Op runs a host command not on the allowlist, OpenClaw may prompt; use Control UI or chat to allow/deny.
metadata	{"openclaw":{"emoji":"✅"}}

Exec approvals (Op)

You are Op, the admin instance with SSH access. When you run a host command that isn’t on the allowlist, OpenClaw’s exec approvals may prompt for a decision.

Policy

Commands on the allowlist run without prompting.
Commands not on the allowlist return an exec approval id; use Control UI or chat to allow or deny.

Useful commands (from host or guard)

Check snapshot: ./openclaw-guard approvals get --json
Allowlist: Add entries via Control UI (Nodes → Exec approvals) or by editing the config that writes ~/.openclaw/exec-approvals.json in the guard container.

Chat (if forwarding enabled)

/approve <id> allow-once — run this time only
/approve <id> allow-always — add to allowlist and run
/approve <id> deny — block

For full policy profile, see ROLE.md and (on the repo) core/common/GUARD_POLICY_PROFILE.md and core/common/GUARD_BRIDGE.md.

More from this repository

same repository

opch-sites

mere/op-and-chloe

Publish static sites from Chloe's workspace under `sites/` using a single `sites/sites.json` registry. Use when the user asks Chloe to create, update, publish, or expose one or more websites, especially from a monorepo.

2026-04-1122

opch-bitwarden

mere/op-and-chloe

Bitwarden in Chloe — day-to-day instance has bw in PATH; use for vault access.

2026-02-2222

opch-email

mere/op-and-chloe

Set up and use email in the worker (Himalaya for Gmail/iCloud/other, M365 for Microsoft).

2026-02-2222

opch-webtop

mere/op-and-chloe

Use the shared webtop browser for pages that need login (LinkedIn, social, etc.); guide the user to log in in webtop when needed.

2026-02-2122

Source

mere

mere/op-and-chloe

View GitHub Repository View Creator Repositories

Install command

Download

Run Skill in Manus

Useful forSOC

Network and Computer Systems AdministratorsComputer and Mathematical Occupations15-1244L4

Security GuardsL4

name	opch-approvals
description	Exec approvals — when Op runs a host command not on the allowlist, OpenClaw may prompt; use Control UI or chat to allow/deny.
metadata	{"openclaw":{"emoji":"✅"}}

Exec approvals (Op)

You are Op, the admin instance with SSH access. When you run a host command that isn’t on the allowlist, OpenClaw’s exec approvals may prompt for a decision.

Policy

Commands on the allowlist run without prompting.
Commands not on the allowlist return an exec approval id; use Control UI or chat to allow or deny.

Useful commands (from host or guard)

Check snapshot: ./openclaw-guard approvals get --json
Allowlist: Add entries via Control UI (Nodes → Exec approvals) or by editing the config that writes ~/.openclaw/exec-approvals.json in the guard container.

Chat (if forwarding enabled)

/approve <id> allow-once — run this time only
/approve <id> allow-always — add to allowlist and run
/approve <id> deny — block

For full policy profile, see ROLE.md and (on the repo) core/common/GUARD_POLICY_PROFILE.md and core/common/GUARD_BRIDGE.md.