When Approval Becomes Execution: Authorization-Grounded Workflow Attacks on Tool-Using Agents

Tool-using language-model agents increasingly rely on local services for document access, approval management, and enterprise workflow execution. This paper studies an authorization-grounded workflow attack in the OpenClaw Agent Security Attack Competition, a controlled benchmark derived from...