I ran Nvidia's NemoClaw to see if OpenClaw is finally safe, but it still has the same problems
… If someone sends you an email that contains a carefully crafted prompt injection, and your OpenClaw agent processes that email, the sandbox won't help. The agent isn't escaping containment, it's operating within its approved boundaries while doing something you didn't authorize. …