Error: package.json missing openclaw.hooks

[Adhders]

openclaw 2026.4.2

openclaw plugins install @vectorize-io/hindsight-openclaw

Resolving clawhub:@vectorize-io/hindsight-openclaw…
Downloading @vectorize-io/hindsight-openclaw…
Extracting /tmp/openclaw-npm-pack-djRzcB/vectorize-io-hindsight-openclaw-0.5.1.tgz…
WARNING: Plugin "hindsight-openclaw" contains dangerous code patterns: Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-kWDHGj/extract/package/dist/index.js:77); Shell command execution detected (child_process) (/tmp/openclaw-plugin-kWDHGj/extract/package/dist/client.js:11); Shell command execution detected (child_process) (/tmp/openclaw-plugin-kWDHGj/extract/package/dist/embed-manager.js:72); Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-kWDHGj/extract/package/dist/embed-manager.js:50)
Downloading @vectorize-io/hindsight-openclaw…
Extracting /tmp/openclaw-hook-pack-6Nm7Sy/vectorize-io-hindsight-openclaw-0.5.1.tgz…
Plugin "hindsight-openclaw" installation blocked: dangerous code patterns detected: Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-kWDHGj/extract/package/dist/index.js:77); Shell command execution detected (child_process) (/tmp/openclaw-plugin-kWDHGj/extract/package/dist/client.js:11); Shell command execution detected (child_process) (/tmp/openclaw-plugin-kWDHGj/extract/package/dist/embed-manager.js:72); Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-kWDHGj/extract/package/dist/embed-manager.js:50)
Also not a valid hook pack: Error: package.json missing openclaw.hooks

[nicoloboschi]

we are fixing it, openclaw is flagging it as insecure. Next plugin version will just work