diff --git a/SECURITY.md b/SECURITY.md
index efb2951869..92f9d0fa4e 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -16,6 +16,7 @@ The best way to help the project right now is by sending PRs.
 
 - Public Internet Exposure
 - Using OpenClaw in ways that the docs recommend not to
+- Prompt injection attacks
 
 ## Operational Guidance