Installation was blocked by OpenClaw 2026.4.10

[lcmarvin]

Plugin Version

1.1.0

OpenClaw Version

2026.4.10

Bug Description

appuser@xxxxxx:~$ openclaw plugins install memory-lancedb-pro@beta

🦞 OpenClaw 2026.4.10 (44e5b62) — Automation with claws: minimal fuss, maximal pinch.

Resolving clawhub:memory-lancedb-pro@beta…
Downloading memory-lancedb-pro@beta…
Extracting /tmp/openclaw-npm-pack-celdZr/memory-lancedb-pro-1.1.0-beta.9.tgz…
WARNING: Plugin "memory-lancedb-pro" contains dangerous code patterns: Shell command execution detected (child_process) (/tmp/openclaw-plugin-nJN6sl/extract/package/index.ts:469); Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-nJN6sl/extract/package/test/context-support-e2e.mjs:17); Shell command execution detected (child_process) (/tmp/openclaw-plugin-nJN6sl/extract/package/test/jsonl-distill-slash-filter.test.mjs:24); Shell command execution detected (child_process) (/tmp/openclaw-plugin-nJN6sl/extract/package/test/openclaw-host-functional.mjs:98); Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-nJN6sl/extract/package/test/openclaw-host-functional.mjs:103); Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-nJN6sl/extract/package/test/plugin-manifest-regression.mjs:11); Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-nJN6sl/extract/package/test/smart-extractor-branches.mjs:10); Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-nJN6sl/extract/package/test/temporal-facts.test.mjs:10); Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-nJN6sl/extract/package/src/embedder.ts:127); Shell command execution detected (child_process) (/tmp/openclaw-plugin-nJN6sl/extract/package/examples/new-session-distill/worker/lesson-extract-worker.mjs:51); Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-nJN6sl/extract/package/examples/new-session-distill/worker/lesson-extract-worker.mjs:27)
Downloading memory-lancedb-pro@beta…
Extracting /tmp/openclaw-hook-pack-3VKcLS/memory-lancedb-pro-1.1.0-beta.9.tgz…
Plugin "memory-lancedb-pro" installation blocked: dangerous code patterns detected: Shell command execution detected (child_process) (/tmp/openclaw-plugin-nJN6sl/extract/package/index.ts:469); Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-nJN6sl/extract/package/test/context-support-e2e.mjs:17); Shell command execution detected (child_process) (/tmp/openclaw-plugin-nJN6sl/extract/package/test/jsonl-distill-slash-filter.test.mjs:24); Shell command execution detected (child_process) (/tmp/openclaw-plugin-nJN6sl/extract/package/test/openclaw-host-functional.mjs:98); Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-nJN6sl/extract/package/test/openclaw-host-functional.mjs:103); Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-nJN6sl/extract/package/test/plugin-manifest-regression.mjs:11); Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-nJN6sl/extract/package/test/smart-extractor-branches.mjs:10); Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-nJN6sl/extract/package/test/temporal-facts.test.mjs:10); Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-nJN6sl/extract/package/src/embedder.ts:127); Shell command execution detected (child_process) (/tmp/openclaw-plugin-nJN6sl/extract/package/examples/new-session-distill/worker/lesson-extract-worker.mjs:51); Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-nJN6sl/extract/package/examples/new-session-distill/worker/lesson-extract-worker.mjs:27)
Also not a valid hook pack: Error: package.json missing openclaw.hooks

Expected Behavior

Plugin can be installed successfully.

Steps to Reproduce

1. Install OpenClaw 2026.4.10
2. openclaw plugins install memory-lancedb-pro@beta

Error Logs / Screenshots

Embedding Provider

None

OS / Platform

Ubuntu 24.04

[AliceLJY]

Thanks for the report @lcmarvin. This is OpenClaw's plugin security scanner flagging the plugin's child_process usage and an env-var + network-send pattern at install time — a scanner heuristic rather than a confirmed vulnerability. Two things: (1) you're on OpenClaw 2026.4.10, which is fairly old; newer gateway releases have tuned these heuristics, so upgrading OpenClaw may clear the block; (2) the flagged patterns are worth a maintainer pass to confirm they're benign/necessary. @rwmjhb / @win4r may want to weigh in on whether anything needs adjusting plugin-side.