I really don’t understand the widespread adoption of OpenClaw when a simple prompt injection in an email, chat message, or calendar event has the potential to leak the credentials/keys for every attached service.
There are going to be some incredible blow ups due to this. From the sound of it people think they're safe by running it with local models and keeping it on their own network but seem to have zero concept of a malicious text prompt finding its way in and turning it into a double agent who figures out how to exfiltrate data.
There are going to be some incredible blow ups due to this. From the sound of it people think they're safe by running it with local models and keeping it on their own network but seem to have zero concept of a malicious text prompt finding its way in and turning it into a double agent who figures out how to exfiltrate data.