Google Translate is now an LLM and that means you can prompt inject it.

If the most well funded AI companies on the planet cannot secure a translation tool from prompt injected jailbreaks, what do you think the chances are anyone else can do it. This applies to all agent systems, the harmful instruction here works on OpenClaw as much as any other system.