BrokenClaw Part 2: Escape the Sub-Agent Sandbox with Prompt Injection in OpenClaw

In the first part of this saga (read first), I described a 0-Click RCE in OpenClaw using prompt injection and exploiting the insecure plugin handling. As a countermeasure...