OpenClaw AI Agents Leaking Sensitive Data in Indirect Prompt Injection Attacks