Wow. This guy ran C̶l̶a̶w̶d̶b̶o̶t̶ M̶o̶l̶t̶b̶o̶t̶ @Openclaw through @ZeroLeaks
… and the results are v. concerning! – 2/100 overall score.
– System prompt leaked immediately.
– Most extraction and injection attacks worked. In practice, this means users can read and tamper

→ View original post on X — @datachaz