← Back to Skills Marketplace
Rejection Logger
by
balkanblbn
· GitHub ↗
· v1.1.0
430
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install rejection-logger
Description
Captures and logs choices, options, or prompts that the agent evaluated and decided NOT to execute. Use whenever you skip a task, reject an approach, or choo...
Usage Guidance
This skill is coherent and low-risk technically, but it persists free-text rejection reasoning to .learnings/REJECTIONS.md which can contain PII or secrets and may be committed to version control. Before installing: (1) inspect scripts/log_rejection.sh and keep it unchanged; (2) add .learnings/REJECTIONS.md to .gitignore or ensure repo policies prevent accidental commits; (3) restrict file permissions (e.g., chmod 600) or encrypt logs if needed; (4) avoid logging raw secrets or sensitive user data — sanitize inputs; (5) consider requiring explicit user confirmation before the agent logs a rejection or disabling autonomous invocation for this skill if you want tighter control.
Capability Analysis
Type: OpenClaw Skill
Name: rejection-logger
Version: 1.1.0
The skill's stated purpose is benign, aiming to log agent rejections for transparency. However, the `scripts/log_rejection.sh` script is vulnerable to shell injection. It directly uses unsanitized command-line arguments (`$1`, `$2`, `$3`) within an `echo` command that appends to a file. This flaw could allow an attacker to execute arbitrary commands on the system if they can control the input provided to the script by the agent, making it a significant remote code execution risk.
Capability Assessment
Purpose & Capability
Name and description describe logging rejected choices. SKILL.md and the included scripts/log_rejection.sh implement exactly that behavior (create .learnings directory and append a Markdown entry). There are no unrelated env vars, binaries, or network calls.
Instruction Scope
Instructions are narrowly scoped to creating/appending a local REJECTIONS.md file using the provided template. They do not request reading other files, calling external endpoints, or accessing unrelated credentials. Important caveat: the instructions explicitly ask the agent to record free-text 'Target' and 'Reason' fields — these entries can contain PII, secrets, or other sensitive content and will be persisted to disk and (if version-controlled) to remote repos.
Install Mechanism
No install spec; this is instruction-only with a small included bash script. The script is short, contains no downloads, and writes only to a local .learnings directory. Low install risk.
Credentials
The skill requests no environment variables or credentials and the script doesn't read env vars. However, persisting agent decisions to a file can leak secrets if those decisions include sensitive data. Consider access control, .gitignore, or encryption for the log file.
Persistence & Privilege
always:false and the skill does not modify other skills or global agent settings. It only writes to a workspace-local .learnings/REJECTIONS.md. Autonomous invocation is allowed by default (platform normal); if the agent is allowed to call skills autonomously it could generate many log entries — consider limiting use or requiring explicit user consent for logging.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install rejection-logger - After installation, invoke the skill by name or use
/rejection-logger - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
Added functional logging script
v1.0.0
Initial release of autonomous rejection logging skill
Metadata
Frequently Asked Questions
What is Rejection Logger?
Captures and logs choices, options, or prompts that the agent evaluated and decided NOT to execute. Use whenever you skip a task, reject an approach, or choo... It is an AI Agent Skill for Claude Code / OpenClaw, with 430 downloads so far.
How do I install Rejection Logger?
Run "/install rejection-logger" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Rejection Logger free?
Yes, Rejection Logger is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Rejection Logger support?
Rejection Logger is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Rejection Logger?
It is built and maintained by balkanblbn (@balkanblbn); the current version is v1.1.0.
More Skills