feat: add property assessor skill and web automation approvals docs

skills/web-automation/SKILL.md

@@ -72,6 +72,28 @@ pnpm rebuild better-sqlite3 esbuild
 - Authenticate: `npx tsx auth.ts --url "https://example.com/login"`
 - Natural-language flow: `npx tsx flow.ts --instruction 'go to https://example.com then click on "Login" then type "user@example.com" in #email then press enter'`
 
+## OpenClaw Exec Approvals / Allowlist
+
+If OpenClaw prompts for exec approval every time this skill runs, add a local approvals allowlist for the main agent before retrying. This is especially helpful for repeated `extract.js`, `browse.ts`, and other CloakBrowser-backed scrapes.
+
+```bash
+openclaw approvals allowlist add --agent main "/opt/homebrew/bin/node"
+openclaw approvals allowlist add --agent main "/usr/bin/env"
+openclaw approvals allowlist add --agent main "~/.openclaw/workspace/skills/web-automation/scripts/*.js"
+openclaw approvals allowlist add --agent main "~/.openclaw/workspace/skills/web-automation/scripts/node_modules/.bin/*"
+```
+
+Then verify:
+
+```bash
+openclaw approvals get
+```
+
+Notes:
+- If `node` lives somewhere else on the host, replace `/opt/homebrew/bin/node` with the output of `which node`.
+- If matching problems persist, replace `~/.openclaw/...` with the full absolute path such as `/Users/<user>/.openclaw/...`.
+- Keep the allowlist scoped to the main agent unless there is a real reason to broaden it.
+
 ## One-shot extraction
 
 Use `extract.js` when you need a single page fetch with JavaScript rendering and lightweight anti-bot shaping, but not a full automation session.