插件安装失败

[southxs]

root@southxs:~# openclaw plugins install @cortexmem/openclaw
17:25:16 [plugins] plugins.allow is empty; discovered non-bundled plugins may auto-load: openclaw-weixin (/root/.openclaw/extensions/openclaw-weixin/index.ts). Set plugins.allow to explicit trusted ids.

🦞 OpenClaw 2026.4.21 (f788c88) — I don't judge, but your missing API keys are absolutely judging you.

Resolving clawhub:@cortexmem/openclaw…
Downloading @cortexmem/openclaw…
Extracting /tmp/openclaw-npm-pack-k49N3r/cortexmem-openclaw-0.6.6.tgz…
WARNING: Plugin "openclaw" contains dangerous code patterns: Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-mtFyA6/extract/package/dist/index.js:2)
Downloading @cortexmem/openclaw…
Extracting /tmp/openclaw-hook-pack-m3YGxP/cortexmem-openclaw-0.6.6.tgz…
Plugin "openclaw" installation blocked: dangerous code patterns detected: Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-mtFyA6/extract/package/dist/index.js:2)
Also not a valid hook pack: Error: package.json missing openclaw.hooks

[southxs]

openclaw版本：2026.4.21

[southxs]

插件两个问题，一个是安全性检测失败
一个是 missing openclaw.hooks