CUA Computer (OpenClaw)
390,823 starsOpenClaw's official external plugin (@openclaw/cua-computer, marked experimental): provides computer control on Windows (x64/ARM64) and glibc Linux (x64/ARM64) hosts — the agent observes the desktop via screenshots (screen.snapshot) and performs real mouse/keyboard actions (computer.act) through one uniform computer tool, calling the package's pinned CUA Driver SDK directly and requiring a vision-capable model. macOS does not use this plugin (built-in Peekaboo/CUA fulfillers instead).
- First published：2026-07-21
- data as of：
- 2026-09-30
Host
Full I/O over the host desktop: screenshots (the agent sees everything on screen — window contents, notifications, displayed password fields) plus real mouse and keyboard control (it can open a terminal, run commands, click any button). The docs note macOS paths require Accessibility and Screen Recording grants; the default coding tool profile excludes computer — it must be explicitly allow-listed to be exposed.
It implements the computer.act/screen.snapshot command contracts of OpenClaw's node fabric, gated by OpenClaw Gateway's tool policy (tools.alsoAllow, sandbox tool lists). Those contracts and policy mechanisms are OpenClaw-proprietary; even where other hosts offer computer control (e.g. Hermes' computer-use install option), the interfaces and safety models differ entirely.
Risk
The highest-authority plugin in this catalog: anything on screen (popups, web pages, mail previews) becomes an injection vector, and the injection's outlet is real control of the whole computer. The project itself marks it experimental, and provider failures explicitly never fall back (errors rather than silently switching paths) — the maintainers know how serious this lane is. Enable only on disposable VMs or tightly governed desktops.
Install prompt
這是需另行安裝的官方外部插件包（@openclaw/cua-computer，npm 或 ClawHub），按官方 Plugin inventory 的安裝路徑透過 OpenClaw 插件管理流程安裝並明確啟用；啟用前官方提供了針對 driver artifacts 的健檢指令（見 computer-use 文件），並要求工具政策暴露 computer 工具、agent 使用視覺模型。Paste this to your agent. It deliberately contains no tool subcommands — check the tool's official docs for commands.