Your Agent Has Root

&ldquo;OpenClaw is a security dumpster fire.&rdquo; — Laurie Voss, npm founding CTO [1] 1. The Opening In April 2025, security researcher Johann Rehberger spent $500 on a 30-day subscription to Devin AI, Cognition&rsquo;s autonomous coding agent. He wanted to test a simple hypothesis: what happens when an AI agent encounters a malicious prompt hidden in a GitHub issue? The answer arrived in…