Nothing about prompt injection protections. This appears to be openclaw but trusting that you won’t silently expose all your (our) data.

So not openclaw, promp injections is a part of the backend based on evalas and scorer meaning that right tool was called, and what each agent can expect.

Instead of having a lot of subagents getting their memory filled with previous runs, prompt injection can be a better way to really narrow down each subagents actual task.