OpenClaw runs locally on a user's computer and requires access to users' files, credentials, passwords, browser history, and more. That could be particularly risky for prompt injections, a type of attack in which an AI encounters hidden instructions on web pages, which could trick it into doing things like sharing private information or publishing on social media.