Is templui-mcp-server safe to use?

templui-mcp-server has a security risk score of 100/100 (CRITICAL risk). Our security analysis detected 387 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of templui-mcp-server?

Based on our automated security analysis, templui-mcp-server presents critical risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Is "templui-mcp-server" on MCP Registry Safe to Install?

Name: templui-mcp-server
Availability: InStock
Author: tggo

tggo · mcp · v1.2.0

A Model Context Protocol (MCP) server for TemplUI components, providing AI assistants with access to component source code, documentation, demos, and metadata.

Risk Assessment

Analyzed

100

out of 100

CRITICAL

387 security findings detected across all analyzers

MCP server analyzed for tool poisoning, prompt injection, and data exfiltration

Severity Breakdown

Critical

High

281

Medium

Low

Info

Finding Categories

Malware Signatures

Secrets

Network

275

IoC Indicators

YARA Rules Matched

9 rules(52 hits)

postinstall file manipulation postinstall environment access postinstall file download postinstall network communication postinstall obfuscation postinstall persistence mechanism postinstall system command credential env files UsingCommandLineArguments

MCP Server Analysis

MCP servers expose tools and resources to AI assistants. Unlike browser extensions, they run as standalone processes with direct system access. Tool definitions are analyzed for prompt injection, data exfiltration, and tool poisoning patterns.

About This Extension

A Model Context Protocol (MCP) server for TemplUI components, providing AI assistants with access to component source code, documentation, demos, and metadata.

Detailed Findings

110 total

YARA Rule Matches

9 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs

185

IP Addresses

Domains

Strings

275

All Indicators · 275

URL

detected URL: https://templui.io/docs/components/tags-input)

XIOC detected URL: https://templui.io/docs/components/tags-input)

extracted_from_files

Domain

detected Domain: example.com

XIOC detected Domain: example.com

extracted_from_files

Domain

detected Domain: dropdown.group

XIOC detected Domain: dropdown.group

extracted_from_files

Domain

detected Domain: modelcontextprotocol.io

XIOC detected Domain: modelcontextprotocol.io

extracted_from_files

Domain

detected Domain: anthropic.com

XIOC detected Domain: anthropic.com

extracted_from_files

Domain

detected Domain: templ.guide

XIOC detected Domain: templ.guide

extracted_from_files

Domain

detected Domain: dialog.md

XIOC detected Domain: dialog.md

extracted_from_files

Domain

detected Domain: button.md

XIOC detected Domain: button.md

extracted_from_files

Domain

detected Domain: readme.md

XIOC detected Domain: readme.md

extracted_from_files

Domain

detected Domain: continue.dev

XIOC detected Domain: continue.dev

extracted_from_files

Domain

detected Domain: handler.js.map

XIOC detected Domain: handler.js.map

extracted_from_files

Domain

detected Domain: createserver.js.map

XIOC detected Domain: createserver.js.map

extracted_from_files

Domain

detected Domain: capabilities.js.map

XIOC detected Domain: capabilities.js.map

extracted_from_files

Domain

detected Domain: index.js.map

XIOC detected Domain: index.js.map

extracted_from_files

Domain

detected Domain: components-list.js.map

XIOC detected Domain: components-list.js.map

extracted_from_files

Domain

detected Domain: args.js.map

XIOC detected Domain: args.js.map

extracted_from_files

Domain

detected Domain: result.help

XIOC detected Domain: result.help

extracted_from_files

Domain

detected Domain: get-component-metadata.js.map

XIOC detected Domain: get-component-metadata.js.map

extracted_from_files

Domain

detected Domain: componentinfo.name

XIOC detected Domain: componentinfo.name

extracted_from_files

detected Domain: get-component-javascript.js.map

XIOC detected Domain: get-component-javascript.js.map

extracted_from_files

Domain

detected Domain: get-component-docs.js.map

XIOC detected Domain: get-component-docs.js.map

extracted_from_files

Domain

detected Domain: get-component-demo.js.map

XIOC detected Domain: get-component-demo.js.map

extracted_from_files

Domain

detected Domain: check-updates.js.map

XIOC detected Domain: check-updates.js.map

extracted_from_files

Domain

detected Domain: version.js.map

XIOC detected Domain: version.js.map

extracted_from_files

Domain

detected Domain: refresh-cache.js.map

XIOC detected Domain: refresh-cache.js.map

extracted_from_files

Domain

detected Domain: list-components.js.map

XIOC detected Domain: list-components.js.map

extracted_from_files

Domain

detected Domain: components.map

XIOC detected Domain: components.map

extracted_from_files

Domain

detected Domain: component.name

XIOC detected Domain: component.name

extracted_from_files

Domain

detected Domain: comp.name

XIOC detected Domain: comp.name

extracted_from_files

Domain

detected Domain: dynamiccomponents.map

XIOC detected Domain: dynamiccomponents.map

extracted_from_files

Domain

detected Domain: get-component.js.map

XIOC detected Domain: get-component.js.map

extracted_from_files

Domain

detected Domain: docs.name

XIOC detected Domain: docs.name

extracted_from_files

Domain

detected Domain: componentfiles.map

XIOC detected Domain: componentfiles.map

extracted_from_files

Domain

detected Domain: components.md

XIOC detected Domain: components.md

extracted_from_files

Domain

detected Domain: cache.js.map

XIOC detected Domain: cache.js.map

extracted_from_files

Domain

detected Domain: cacheentry.data

XIOC detected Domain: cacheentry.data

extracted_from_files

Domain

detected Domain: memorycached.data

XIOC detected Domain: memorycached.data

extracted_from_files

Domain

detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain

detected Domain: item.name

XIOC detected Domain: item.name

extracted_from_files

Domain

detected Domain: demoresponse.data

XIOC detected Domain: demoresponse.data

extracted_from_files

Domain

detected Domain: file.name

XIOC detected Domain: file.name

extracted_from_files

Domain

detected Domain: response.data

XIOC detected Domain: response.data

extracted_from_files

Domain

detected Domain: api.github.com

XIOC detected Domain: api.github.com

extracted_from_files

Domain

detected Domain: raw.githubusercontent.com

XIOC detected Domain: raw.githubusercontent.com

extracted_from_files

Domain

detected Domain: documentation.js.map

XIOC detected Domain: documentation.js.map

extracted_from_files

Domain

detected Domain: error.errors.map

XIOC detected Domain: error.errors.map

extracted_from_files

Domain

detected Domain: updater.js.map

XIOC detected Domain: updater.js.map

extracted_from_files

Domain

detected Domain: latestcommit.date

XIOC detected Domain: latestcommit.date

extracted_from_files

Domain

detected Domain: logger.js.map

XIOC detected Domain: logger.js.map

extracted_from_files

Domain

detected Domain: logger.info

XIOC detected Domain: logger.info

extracted_from_files

Domain

detected Domain: github-client.js.map

XIOC detected Domain: github-client.js.map

extracted_from_files

Domain

detected Domain: response.data.commit.committer.date

XIOC detected Domain: response.data.commit.committer.date

extracted_from_files

Domain

detected Domain: breadcrumb.page

XIOC detected Domain: breadcrumb.page

extracted_from_files

Domain

detected Domain: breadcrumb.link

XIOC detected Domain: breadcrumb.link

extracted_from_files

Domain

detected Domain: avatar.group

XIOC detected Domain: avatar.group

extracted_from_files

Domain

detected Domain: icon.camera

XIOC detected Domain: icon.camera

extracted_from_files

Domain

detected Domain: avatars.githubusercontent.com

XIOC detected Domain: avatars.githubusercontent.com

extracted_from_files

Domain

detected Domain: pro.templui.io

XIOC detected Domain: pro.templui.io

extracted_from_files

Domain

detected Domain: validation.js.map

XIOC detected Domain: validation.js.map

extracted_from_files

Domain

detected Domain: icon.plus

XIOC detected Domain: icon.plus

extracted_from_files

Domain

detected Domain: icon.cloud

XIOC detected Domain: icon.cloud

extracted_from_files

Domain

detected Domain: chart.data

XIOC detected Domain: chart.data

extracted_from_files

Domain

detected Domain: chartjs.org

XIOC detected Domain: chartjs.org

extracted_from_files

Domain

detected Domain: carousel.next

XIOC detected Domain: carousel.next

extracted_from_files

Domain

detected Domain: selectbox.group

XIOC detected Domain: selectbox.group

extracted_from_files

Domain

detected Domain: icon.house

XIOC detected Domain: icon.house

extracted_from_files

Domain

detected Domain: inputotp.group

XIOC detected Domain: inputotp.group

extracted_from_files

Domain

detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain

detected Domain: golang.org

XIOC detected Domain: golang.org

extracted_from_files

Domain

detected Domain: rating.group

XIOC detected Domain: rating.group

extracted_from_files

Domain

detected Domain: radio.radio

XIOC detected Domain: radio.radio

extracted_from_files

Domain

detected Domain: calendar.day

XIOC detected Domain: calendar.day

extracted_from_files

Domain

detected Domain: time.now

XIOC detected Domain: time.now

extracted_from_files

Domain

detected Domain: badge.fury.io

XIOC detected Domain: badge.fury.io

extracted_from_files

detected IP: ::

XIOC detected IP: ::

extracted_from_files

detected IP: 1.1.1.1

XIOC detected IP: 1.1.1.1

extracted_from_files

Domain

detected Domain: icon.star

XIOC detected Domain: icon.star

extracted_from_files

Domain

detected Domain: floating-ui.com

XIOC detected Domain: floating-ui.com

extracted_from_files

Domain

detected Domain: pagination.next

XIOC detected Domain: pagination.next

extracted_from_files

Domain

detected Domain: pagination.link

XIOC detected Domain: pagination.link

extracted_from_files

URL

detected URL: https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)

XIOC detected URL: https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)

extracted_from_files

URL

detected URL: https://badge.fury.io/js/templui-mcp-server.svg)](https://badge.fury.io/js/templui-mcp-server)

XIOC detected URL: https://badge.fury.io/js/templui-mcp-server.svg)](https://badge.fury.io/js/templui-mcp-server)

extracted_from_files

Other

detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other

detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Domain

detected Domain: yoursite.com

XIOC detected Domain: yoursite.com

extracted_from_files

Domain

detected Domain: e.detail.target

XIOC detected Domain: e.detail.target

extracted_from_files

Domain

detected Domain: tailwindcss.com

XIOC detected Domain: tailwindcss.com

extracted_from_files

URL

detected URL: https://anthropic.com)**

XIOC detected URL: https://anthropic.com)**

extracted_from_files

URL

detected URL: https://templ.guide)**

XIOC detected URL: https://templ.guide)**

extracted_from_files

URL

detected URL: https://templui.io)**

XIOC detected URL: https://templui.io)**

extracted_from_files

URL

detected URL: https://github.com/tggo/templui-mcp-server.git

XIOC detected URL: https://github.com/tggo/templui-mcp-server.git

extracted_from_files

URL

detected URL: https://github.com/settings/tokens

XIOC detected URL: https://github.com/settings/tokens

extracted_from_files

URL

detected URL: https://github.com/settings/tokens)

XIOC detected URL: https://github.com/settings/tokens)

extracted_from_files

URL

detected URL: https://templui.io)

XIOC detected URL: https://templui.io)

extracted_from_files

URL

detected URL: https://api.github.com

XIOC detected URL: https://api.github.com

extracted_from_files

URL

detected URL: https://github.com/tggo/templui-mcp-server

XIOC detected URL: https://github.com/tggo/templui-mcp-server

extracted_from_files

URL

detected URL: https://github.com/tggo/templui-mcp-server/issues)

XIOC detected URL: https://github.com/tggo/templui-mcp-server/issues)

extracted_from_files

URL

detected URL: https://github.com/tggo/templui-mcp-server)

XIOC detected URL: https://github.com/tggo/templui-mcp-server)

extracted_from_files

URL

detected URL: https://modelcontextprotocol.io)

XIOC detected URL: https://modelcontextprotocol.io)

extracted_from_files

URL

detected URL: https://templ.guide)

XIOC detected URL: https://templ.guide)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/alert)

XIOC detected URL: https://templui.io/docs/components/alert)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/accordion)

XIOC detected URL: https://templui.io/docs/components/accordion)

extracted_from_files

URL

detected URL: https://pro.templui.io/)

XIOC detected URL: https://pro.templui.io/)

extracted_from_files

URL

detected URL: https://templui.io/docs/components

XIOC detected URL: https://templui.io/docs/components

extracted_from_files

URL

detected URL: https://github.com/tggo/templui-mcp-server/issues

XIOC detected URL: https://github.com/tggo/templui-mcp-server/issues

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/$

XIOC detected URL: https://raw.githubusercontent.com/$

extracted_from_files

URL

detected URL: https://templui.io/docs/components/card)

XIOC detected URL: https://templui.io/docs/components/card)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/calendar)

XIOC detected URL: https://templui.io/docs/components/calendar)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/button)

XIOC detected URL: https://templui.io/docs/components/button)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/breadcrumb)

XIOC detected URL: https://templui.io/docs/components/breadcrumb)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/badge)

XIOC detected URL: https://templui.io/docs/components/badge)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/avatar)

XIOC detected URL: https://templui.io/docs/components/avatar)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/aspect-ratio)

XIOC detected URL: https://templui.io/docs/components/aspect-ratio)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/drawer)

XIOC detected URL: https://templui.io/docs/components/drawer)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/date-picker)

XIOC detected URL: https://templui.io/docs/components/date-picker)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/code)

XIOC detected URL: https://templui.io/docs/components/code)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/checkbox-card)

XIOC detected URL: https://templui.io/docs/components/checkbox-card)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/checkbox)

XIOC detected URL: https://templui.io/docs/components/checkbox)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/charts)

XIOC detected URL: https://templui.io/docs/components/charts)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/carousel)

XIOC detected URL: https://templui.io/docs/components/carousel)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/modal)

XIOC detected URL: https://templui.io/docs/components/modal)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/label)

XIOC detected URL: https://templui.io/docs/components/label)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/input-otp)

XIOC detected URL: https://templui.io/docs/components/input-otp)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/input)

XIOC detected URL: https://templui.io/docs/components/input)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/icon)

XIOC detected URL: https://templui.io/docs/components/icon)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/form)

XIOC detected URL: https://templui.io/docs/components/form)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/dropdown)

XIOC detected URL: https://templui.io/docs/components/dropdown)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/select-box)

XIOC detected URL: https://templui.io/docs/components/select-box)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/rating)

XIOC detected URL: https://templui.io/docs/components/rating)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/radio-card)

XIOC detected URL: https://templui.io/docs/components/radio-card)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/radio)

XIOC detected URL: https://templui.io/docs/components/radio)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/progress)

XIOC detected URL: https://templui.io/docs/components/progress)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/popover)

XIOC detected URL: https://templui.io/docs/components/popover)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/pagination)

XIOC detected URL: https://templui.io/docs/components/pagination)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/textarea)

XIOC detected URL: https://templui.io/docs/components/textarea)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/checkbox#with-label)

XIOC detected URL: https://templui.io/docs/components/checkbox#with-label)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/toast)

XIOC detected URL: https://templui.io/docs/components/toast)

extracted_from_files

Domain

detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

URL

detected URL: https://templui.io/docs/components/slider)

XIOC detected URL: https://templui.io/docs/components/slider)

extracted_from_files

Domain

detected Domain: opensource.org

XIOC detected Domain: opensource.org

extracted_from_files

URL

detected URL: https://templui.io/docs/components/separator)

XIOC detected URL: https://templui.io/docs/components/separator)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/alert

XIOC detected URL: https://templui.io/docs/components/alert

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/accordion)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/accordion)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/accordion

XIOC detected URL: https://templui.io/docs/components/accordion

extracted_from_files

URL

detected URL: https://templui.io/docs/components/tooltip)

XIOC detected URL: https://templui.io/docs/components/tooltip)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/toggle)

XIOC detected URL: https://templui.io/docs/components/toggle)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/pagination

XIOC detected URL: https://templui.io/docs/components/pagination

extracted_from_files

URL

detected URL: https://templui.io/docs/components/time-picker)

XIOC detected URL: https://templui.io/docs/components/time-picker)

extracted_from_files

URL

detected URL: https://avatars.githubusercontent.com/u/26936893?v=4)

XIOC detected URL: https://avatars.githubusercontent.com/u/26936893?v=4)

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/avatar)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/avatar)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/avatar

XIOC detected URL: https://templui.io/docs/components/avatar

extracted_from_files

URL

detected URL: https://templui.io/assets/img/aspect_ratio_placeholder.jpeg)

XIOC detected URL: https://templui.io/assets/img/aspect_ratio_placeholder.jpeg)

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/aspectratio)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/aspectratio)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/aspect-ratio

XIOC detected URL: https://templui.io/docs/components/aspect-ratio

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/alert)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/alert)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/button

XIOC detected URL: https://templui.io/docs/components/button

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/breadcrumb)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/breadcrumb)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/breadcrumb

XIOC detected URL: https://templui.io/docs/components/breadcrumb

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/badge)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/badge)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/badge

XIOC detected URL: https://templui.io/docs/components/badge

extracted_from_files

URL

detected URL: https://templui.io/docs/components/broken-image.jpg)JD

XIOC detected URL: https://templui.io/docs/components/broken-image.jpg)JD

extracted_from_files

URL

detected URL: https://avatars.githubusercontent.com/u/26936893?v=4

XIOC detected URL: https://avatars.githubusercontent.com/u/26936893?v=4

extracted_from_files

URL

detected URL: https://templui.io/docs/components/carousel

XIOC detected URL: https://templui.io/docs/components/carousel

extracted_from_files

URL

detected URL: https://templui.io/assets/img/card_placeholder.jpeg)

XIOC detected URL: https://templui.io/assets/img/card_placeholder.jpeg)

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/card)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/card)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/card

XIOC detected URL: https://templui.io/docs/components/card

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/calendar)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/calendar)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/calendar

XIOC detected URL: https://templui.io/docs/components/calendar

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/button)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/button)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/checkbox

XIOC detected URL: https://templui.io/docs/components/checkbox

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/checkboxcard)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/checkboxcard)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/checkbox-card

XIOC detected URL: https://templui.io/docs/components/checkbox-card

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/chart)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/chart)

extracted_from_files

URL

detected URL: https://chartjs.org/).

XIOC detected URL: https://chartjs.org/).

extracted_from_files

URL

detected URL: https://templui.io/docs/components/charts

XIOC detected URL: https://templui.io/docs/components/charts

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/carousel)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/carousel)

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/drawer)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/drawer)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/drawer

XIOC detected URL: https://templui.io/docs/components/drawer

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/datepicker)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/datepicker)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/date-picker

XIOC detected URL: https://templui.io/docs/components/date-picker

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/code)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/code)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/code

XIOC detected URL: https://templui.io/docs/components/code

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/checkbox)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/checkbox)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/checkbox#form)

XIOC detected URL: https://templui.io/docs/components/checkbox#form)

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/form)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/form)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/form

XIOC detected URL: https://templui.io/docs/components/form

extracted_from_files

URL

detected URL: https://github.com

XIOC detected URL: https://github.com

extracted_from_files

URL

detected URL: https://github.com/)SupportAPI

XIOC detected URL: https://github.com/)SupportAPI

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/dropdown)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/dropdown)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/dropdown

XIOC detected URL: https://templui.io/docs/components/dropdown

extracted_from_files

URL

detected URL: https://templui.io/docs/components/tags-input#form)

XIOC detected URL: https://templui.io/docs/components/tags-input#form)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/textarea#form)

XIOC detected URL: https://templui.io/docs/components/textarea#form)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/select-box#form)

XIOC detected URL: https://templui.io/docs/components/select-box#form)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/radio#form)

XIOC detected URL: https://templui.io/docs/components/radio#form)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/input-otp#form)

XIOC detected URL: https://templui.io/docs/components/input-otp#form)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/input#form)

XIOC detected URL: https://templui.io/docs/components/input#form)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/date-picker#form)

XIOC detected URL: https://templui.io/docs/components/date-picker#form)

extracted_from_files

URL

detected URL: http://www.w3.org/2000/svg

XIOC detected URL: http://www.w3.org/2000/svg

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/icon)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/icon)

extracted_from_files

URL

detected URL: https://lucide.dev/)

XIOC detected URL: https://lucide.dev/)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/icon

XIOC detected URL: https://templui.io/docs/components/icon

extracted_from_files

URL

detected URL: https://templui.io/docs/components/rating#form)

XIOC detected URL: https://templui.io/docs/components/rating#form)

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/pagination)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/pagination)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/popover

XIOC detected URL: https://templui.io/docs/components/popover

extracted_from_files

Domain

detected Domain: templui.io

XIOC detected Domain: templui.io

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/label)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/label)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/label

XIOC detected URL: https://templui.io/docs/components/label

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/input)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/input)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/input

XIOC detected URL: https://templui.io/docs/components/input

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/inputotp)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/inputotp)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/input-otp

XIOC detected URL: https://templui.io/docs/components/input-otp

extracted_from_files

URL

detected URL: https://templui.io/docs/components/tags-input#with-label)

XIOC detected URL: https://templui.io/docs/components/tags-input#with-label)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/textarea#with-label)

XIOC detected URL: https://templui.io/docs/components/textarea#with-label)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/select#with-label)

XIOC detected URL: https://templui.io/docs/components/select#with-label)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/radio#with-label)

XIOC detected URL: https://templui.io/docs/components/radio#with-label)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/input-otp#with-label)

XIOC detected URL: https://templui.io/docs/components/input-otp#with-label)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/input#with-label)

XIOC detected URL: https://templui.io/docs/components/input#with-label)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/date-picker#with-label)

XIOC detected URL: https://templui.io/docs/components/date-picker#with-label)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/table)

XIOC detected URL: https://templui.io/docs/components/table)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/skeleton)

XIOC detected URL: https://templui.io/docs/components/skeleton)

extracted_from_files

Domain

detected Domain: img.shields.io

XIOC detected Domain: img.shields.io

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/modal)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/modal)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/modal

XIOC detected URL: https://templui.io/docs/components/modal

extracted_from_files

URL

detected URL: https://templui.io/docs/components/rating#with-label)

XIOC detected URL: https://templui.io/docs/components/rating#with-label)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/toggle#with-label)

XIOC detected URL: https://templui.io/docs/components/toggle#with-label)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/radio

XIOC detected URL: https://templui.io/docs/components/radio

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/radiocard)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/radiocard)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/radio-card

XIOC detected URL: https://templui.io/docs/components/radio-card

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/progress)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/progress)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/progress

XIOC detected URL: https://templui.io/docs/components/progress

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/popover)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/popover)

extracted_from_files

URL

detected URL: https://floating-ui.com/).

XIOC detected URL: https://floating-ui.com/).

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/separator)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/separator)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/separator

XIOC detected URL: https://templui.io/docs/components/separator

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/selectbox)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/selectbox)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/select-box

XIOC detected URL: https://templui.io/docs/components/select-box

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/rating)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/rating)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/rating

XIOC detected URL: https://templui.io/docs/components/rating

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/radio)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/radio)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/tabs

XIOC detected URL: https://templui.io/docs/components/tabs

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/table)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/table)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/table

XIOC detected URL: https://templui.io/docs/components/table

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/slider)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/slider)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/slider

XIOC detected URL: https://templui.io/docs/components/slider

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/skeleton)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/skeleton)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/skeleton

XIOC detected URL: https://templui.io/docs/components/skeleton

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/timepicker)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/timepicker)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/time-picker

XIOC detected URL: https://templui.io/docs/components/time-picker

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/textarea)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/textarea)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/textarea

XIOC detected URL: https://templui.io/docs/components/textarea

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/tagsinput)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/tagsinput)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/tags-input

XIOC detected URL: https://templui.io/docs/components/tags-input

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/tabs)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/tabs)

extracted_from_files

URL

detected URL: https://golang.org/)

XIOC detected URL: https://golang.org/)

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/tooltip)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/tooltip)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/tooltip

XIOC detected URL: https://templui.io/docs/components/tooltip

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/toggle)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/toggle)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/toggle

XIOC detected URL: https://templui.io/docs/components/toggle

extracted_from_files

URL

detected URL: https://github.com/templui/templui/tree/main/internal/components/toast)

XIOC detected URL: https://github.com/templui/templui/tree/main/internal/components/toast)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/toast

XIOC detected URL: https://templui.io/docs/components/toast

extracted_from_files

URL

detected URL: https://github.com/tailwindlabs/tailwindcss/releases/latest/download/tailwindcss-windows-x64.exe

XIOC detected URL: https://github.com/tailwindlabs/tailwindcss/releases/latest/download/tailwindcss-windows-x64.exe

extracted_from_files

URL

detected URL: https://github.com/tailwindlabs/tailwindcss/releases/latest/download/tailwindcss-linux-x64

XIOC detected URL: https://github.com/tailwindlabs/tailwindcss/releases/latest/download/tailwindcss-linux-x64

extracted_from_files

URL

detected URL: https://github.com/tailwindlabs/tailwindcss/releases/latest/download/tailwindcss-macos-x64

XIOC detected URL: https://github.com/tailwindlabs/tailwindcss/releases/latest/download/tailwindcss-macos-x64

extracted_from_files

URL

detected URL: https://github.com/tailwindlabs/tailwindcss/releases/latest/download/tailwindcss-macos-arm64

XIOC detected URL: https://github.com/tailwindlabs/tailwindcss/releases/latest/download/tailwindcss-macos-arm64

extracted_from_files

URL

detected URL: https://tailwindcss.com/)

XIOC detected URL: https://tailwindcss.com/)

extracted_from_files

URL

detected URL: https://templ.guide/)

XIOC detected URL: https://templ.guide/)

extracted_from_files

URL

detected URL: https://golang.org/dl)

XIOC detected URL: https://golang.org/dl)

extracted_from_files

URL

detected URL: https://tailwindcss.com/docs)

XIOC detected URL: https://tailwindcss.com/docs)

extracted_from_files

URL

detected URL: https://github.com/templui/templui-quickstart)

XIOC detected URL: https://github.com/templui/templui-quickstart)

extracted_from_files

URL

detected URL: https://templui.io/docs/themes).

XIOC detected URL: https://templui.io/docs/themes).

extracted_from_files

detected IP: 127.0.0.1

XIOC detected IP: 127.0.0.1

extracted_from_files

URL

detected URL: https://templui.io/docs/components/toggle#form)

XIOC detected URL: https://templui.io/docs/components/toggle#form)

extracted_from_files

URL

detected URL: https://templui.io/docs/components/time-picker#form)

XIOC detected URL: https://templui.io/docs/components/time-picker#form)

extracted_from_files

Domain

detected Domain: lucide.dev

XIOC detected Domain: lucide.dev

extracted_from_files

URL

detected URL: https://templui.io/docs/components/tabs)

XIOC detected URL: https://templui.io/docs/components/tabs)

extracted_from_files

Security Analysis Summary

Security Analysis Overview

templui-mcp-server is a mcp extension published by tggo. Version 1.2.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 387 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

High: 60 finding(s)
Medium: 281 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

templui-mcp-server is published by tggo on the mcp marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

@koneksi/mcp-server

alvinreyes

CRITICAL

update-browserslist-db

CRITICAL

@iflow-mcp/intuit-quickbooks-online-mcp-server

chatflowdev

CRITICAL

@youtyan/browser-pilot

GitHub Actions

CRITICAL

second-brain-health-check

iwo-szapar

CRITICAL

@nitrostack/core

abhishekpanditoff

CRITICAL

Risk Assessment

Severity Breakdown

Finding Categories

YARA Rules Matched

MCP Server Analysis

About This Extension

Detailed Findings

MCP-TOOL-CREDENTIAL-ACCESS-build/cli/args.js-104

MCP-TOOL-CREDENTIAL-ACCESS-build/utils/github-client.js-39

MCP-TOOL-CREDENTIAL-ACCESS-build/cli/args.js-103

MCP-TOOL-CREDENTIAL-ACCESS-build/cli/args.js-99

MCP-TOOL-CREDENTIAL-ACCESS-build/cli/args.js-100

MCP-TOOL-CREDENTIAL-ACCESS-build/server/index.js-55

MCP-TOOL-CREDENTIAL-ACCESS-build/utils/logger.js-4

MCP-TOOL-FILESYSTEM-ACCESS-build/utils/cache.js-77

MCP-TOOL-FILESYSTEM-ACCESS-build/utils/cache.js-38

MCP-TOOL-FILESYSTEM-ACCESS-build/utils/cache.js-149

MCP-TOOL-FILESYSTEM-ACCESS-build/utils/documentation.js-20

NET-SOCKET_IO-build/cli/args.js-13

HASH-f5915454652b6916

HASH-32f0c35e86782e03

HASH-6da52f354ff942ed

HASH-b792ed482788d7e3

HASH-8c17ec7d06a69bf0

HASH-046bb78f9911a05c

HASH-d51ce212c3ae4e20

HASH-65a2381a01fc850b

HASH-62415600a1fb3c94

HASH-5b6b2b979c57bd64

HASH-05800f252d5bf22e

HASH-ce199ea1caf1350c

HASH-a163c450116a63c7

HASH-6b8911c4cf04a3cf

HASH-1752553eba3f119d

HASH-e61cb1df2d798054

HASH-10e7ef94b3e19e92

HASH-0611b98c7108c5be

HASH-79502f815bcb55f6

HASH-4a1e44cd85fe1b32

HASH-99456096233a112e

HASH-1e3e80a3f244b0c7

HASH-6426738588c815f3

HASH-64e87c91eb635e78

HASH-8517f7e442e48bf3

HASH-1517eb9b7689b2a5

HASH-a1d8e97edb3172f1

HASH-c32489df7b580755

HASH-45bf0feee508be24

HASH-e2ea37d0979cc62c

HASH-0b1904302e8785b7

HASH-3d123f48f4a4885e

HASH-af290366702262cf

HASH-913a35c40963279b

HASH-98cdd02cfd1ace29

HASH-e9be4f960f081ee3

HASH-a590e69f9cc19372

HASH-4f418ba787515e2e

HASH-bbc690a85c3782e1

HASH-c03bd9eb354ef050

HASH-7c8f9119e5afc6c3

HASH-a2342a854fd39233

HASH-dd7ecb7a2473e724

HASH-779aa601e057c3d2

HASH-dcc3b5a418105859

HASH-7267e587ac56150c

YARA Rule Matches

postinstall file manipulation

postinstall environment access

postinstall file download

postinstall network communication

postinstall obfuscation

postinstall persistence mechanism

postinstall system command

credential env files

UsingCommandLineArguments

Indicators of Compromise

All Indicators · 275

Security Analysis Summary

Security Analysis Overview

Risk Assessment