OpenClaw is powerful, but give it real credentials and you're exposed. Prompt injections steal API k...