In a controlled lab, a malicious webpage got OpenClaw to enumerate tools, read local documents, write artifacts, and send unauthorized messages to loopback sinks.
OpenClaw at Work: Prompt Injection Risks
calendar_today
March 12, 2026
domain
promptfoo