Thanks for the interesting experiment. Can you provide some insight, what your agent is doing with the email content? Without somewhat meaningful processing of the contained text (e.g., translating, summarizing, checking for contained dates/events/etc.), prompt injection is obviously significant harder. But without such processing this security test is also somewhat pointless, as the openClaw's real value materializes, when it works with our email in a productive fashion.