In February 2026, developer Fernando Irarrázaval published hackmyclaw.com with a simple challenge: Email Fiu, his AI assistant, and trick it into leaking a secrets.env file—a document where software developers store API keys and passwords. Fiu runs on OpenClaw, an open-source agentic framework that connects an AI model to your email, calendar, files, and browser—giving it the ability to act on your behalf, not just respond. Irarrázaval used Anthropic's Claude Opus 4.6 underneath, protected by a security prompt of just a few lines.