← Back to Clusters

Plugin Management Enhancements

This cluster of pull requests focuses on improving the installation and management of plugins within the OpenClaw framework.

32 PRs
fix plugins Representative: #8073
# Title Author Created GitHub
2556 fix(plugin-install): handle existing plugins and filter workspace deps longmaba 2026-01-27 View
3564 fix(plugins): follow symlinks in plugin and hook discovery mollywires 2026-01-28 View
4263 fix(plugins): default configSchema when missing from manifest SoulSniper-V2 2026-01-30 View
4881 docs(plugin): clarify memory-lancedb is bundled (no npm install needed) AverageSuami 2026-01-30 View
7090 fix: plugin install uses manifest ID for folder name (#2796) dial481 2026-02-02 View
7938 fix(agents): install node skills with --prefix CONFIG_DIR for non-root/Docker logozorro 2026-02-03 View
8073 fix(plugins): add --ignore-scripts to npm install rep yubrew 2026-02-03 View
8075 fix(skills): add --ignore-scripts to all package managers yubrew 2026-02-03 View
8600 fix(update): add --ignore-scripts to prevent supply chain attacks yubrew 2026-02-04 View
11432 fix(security): add --ignore-scripts to npm install in hook and plugin installers coygeek 2026-02-07 View
12084 fix: prevent false duplicate plugin warning for bundled channel plugins shadril238 2026-02-08 View
13169 security: add --ignore-scripts to npm install during plugin/hook installation RamiNoodle733 2026-02-10 View
14112 test(security): harden plugin install against script execution davidahmann 2026-02-11 View
15618 fix(plugins): reject async plugin registration instead of silently ignoring AI-Reviewer-QS 2026-02-13 View
16958 fix(security): escape user input in HTML gallery to prevent stored XSS CornBrother0x 2026-02-15 View
18966 fix(config): downgrade unknown bundled plugin references to warnings moxunjinmu 2026-02-17 View
19021 fix(hooks): reject path traversal in hook pack manifest entries during install moxunjinmu 2026-02-17 View
19542 security: sandbox dynamic import in hook transforms with symlink validation Mozzzaic 2026-02-17 View
19717 fix: load plugin registry before channel commands run MisterGuy420 2026-02-18 View
20402 Pr/load openclaw plugins async ramarnat 2026-02-18 View
20424 Fix plugin extension path traversal in discovery/install markmusson 2026-02-18 View
20499 test(plugins): add bundled+config duplicate discovery regression dcol91863 2026-02-19 View
20775 fix(security): OC-10 add webhook payload schema validation to prevent malform... aether-ai-agent 2026-02-19 View
20889 fix: suppress duplicate warning for virtual auto-enabled entries akramcodez 2026-02-19 View
21245 fix(plugins): harden symlinked extension discovery victorGPT 2026-02-19 View
21855 feat: add memory-bank skill — persistent file-based context winstonkoh87 2026-02-20 View
21871 fix(plugins): suppress false duplicate warning when user-installed plugin sha... hydro13 2026-02-20 View
22410 docs: Add Agent Cloud Memory to community skills lilyjazz 2026-02-21 View
22467 fix: failure while installing skills vivganes 2026-02-21 View
23294 fix(security): OC-201 Hook Transform RCE - Symlink-Safe Path Containment aether-ai-agent 2026-02-22 View