OpenClaw: MCP stdio server env could load dangerous startup variables from workspace config

_AI Threats — being enriched by Lyrie Threat Intelligence._

Lyrie's autonomous defense layer flags this class of exposure the moment it surfaces — no signature update required.