diff --git a/README.md b/README.md
index 5cbe59d..72aac05 100644
--- a/README.md
+++ b/README.md
@@ -13,6 +13,7 @@ adapter, and tests; nothing here at the repo root is required at runtime.
 | Demo | What it shows |
 |---|---|
 | [helpdesk-bot](helpdesk-bot/README.md) | Indirect prompt injection (XPIA) via a poisoned support ticket. Single-`git apply` red -> green walkthrough. |
+| [openclaw](openclaw/README.md) | Plugin supply-chain XPIA against OpenClaw. Malicious plugin delivers payloads via tool output **or** tool description; auth-injecting reverse proxy keeps API keys off the sandbox. |
 
 ## Repository layout