OpenClaw Agent Exposes Credentials in Phishing Simulation (Web Pulse, 2026)