Security audit
TypeUI
Security checks for vulnerabilities and agentic risk
Overview
This plugin transparently adds the TypeUI MCP server to OpenClaw so agents can use TypeUI design context, with no evidence of hidden or destructive behavior.
Install this if you want OpenClaw agents to use TypeUI design context. Be aware that enabling and logging into the remote MCP server means TypeUI may receive relevant design prompts or project context when its tools are used; review TypeUI's terms and privacy policy before authorizing OAuth.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.