Then There Is Prompt Injection: The Wild Wide West of OpenClaw Agentic System Security

Evidence record

Qualitative coding of 162 Reddit security reports and 180 retained GitHub issues, yielding 521 CWE label instances across 59 types. Includes a dummy-secret illustration, not 521 verified exploits.

Read the original source ↗

Claim-level citations (3)

• supportsOpenClaw complaint study classified reported weaknesses without verifying 521 exploits: The authors screened more than 25,000 Reddit posts and retained 162 security-relevant posts with 1,787 associated comments.

  Abstract; Reddit corpus selection

• supportsOpenClaw complaint study classified reported weaknesses without verifying 521 exploits: They retained 180 of 358 GitHub security-tagged issues and coded 521 weakness instances across 59 CWE types, which are classifications rather than 521 independently exploited vulnerabilities.

  Abstract; GitHub issue selection and CWE mapping

• supportsOpenClaw complaint study classified reported weaknesses without verifying 521 exploits: The authors report 543 practitioner mitigation suggestions clustered into seven strategies, but their illustrative reconstruction uses dummy secrets rather than reproducing all tagged issues.

  Abstract, empirical analysis and illustrative reconstruction