<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>prompt-injection on Will Grana</title><link>https://willgrana.com/tags/prompt-injection/</link><description>Recent content in prompt-injection on Will Grana</description><generator>Hugo -- gohugo.io</generator><language>en</language><copyright>© 2026 Will Grana</copyright><lastBuildDate>Tue, 27 Oct 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://willgrana.com/tags/prompt-injection/index.xml" rel="self" type="application/rss+xml"/><item><title>How One Email Turned My AI Agent Into a Data Exfiltration Tool</title><link>https://willgrana.com/posts/ai-agent-email-exfiltration/</link><pubDate>Tue, 27 Oct 2026 00:00:00 +0000</pubDate><guid>https://willgrana.com/posts/ai-agent-email-exfiltration/</guid><description>I set up OpenClaw in my lab to read email and maintain a local report, then used one attack email to make it upload confidential data. I traced the transfer and blocked the next upload while the useful automation continued.</description><media:content xmlns:media="http://search.yahoo.com/mrss/" url="https://willgrana.com/posts/ai-agent-email-exfiltration/feature.png"/></item></channel></rss>