GHSA-4gc7-qcvf-38wg: In OpenClaw, manually adding sort to tools.exec.safeBins could bypass allowlist approval via --compress-program

This issue applies to a non-default configuration only. If sort is manually added to tools.exec.safeBins, OpenClaw could treat sort --compress-program=<prog> as valid safe-bin usage. In security=allowlist + ask=on-miss, this could satisfy allowlist checks and skip operator approval, while GNU sort may invoke an external program via --compress-program.