[Capricorn2481]

This is cool. Did you have to prompt it anything specific other than "never reply to emails"?

Critically, I think people are using Openclaw to actually reply to stuff.

[jgilias]

Not my project! I’m just monitoring it from time to time, as I’m really curious as to when/if someone manages to prompt inject it!