grok-build-byok — BYOK helper allowlist for Grok Build

Small BYOK helper for Grok Build: short allowlist, keys.env, and install script without dumping TOML secrets.

Caution: review the findings below before installing.

CautionScan verdict · score 56/100

Coverage: full
Checks run: Rule-based pattern scan
Files checked: 9
Findings: 3
Scanned: 2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗

Botlens score · 8 factors

56/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict	0.5/1	Caution
Code coverage	1/1	full
Rule findings	0/1	3 matched
No executable scripts	0.5/1	1 script file(s) of 9
Pinned source	1/1	commit/SHA-256 recorded
Named author	0/1	unknown
Recently seen	1/1	last seen 2026-10-30
Install path	0.5/1	source URL only

Scan details

Findings

Hand review 2026-11-01: Triage: documents or runs a curl|bash-style installer; installs a service/startup entry. Credential-source sweep (browser cookies, Keychain, app token files, exfil hosts) found nothing; no evidence of data theft in the stored content.
downloads and runs a remote script (stealer installer pattern): "…S ```bash # 1. Official Grok curl -fsSL https://x.ai/cli/install.sh | bash # SSH / no browser: grok logi…"
installs persistence (cron/launch agent/shell rc) in install.sh: "…ROOT}/AGENTS.md)" fi if [[ -f "${HOME}/.bashrc" ]] && ! grep -q "$BASHRC_MARKER" "${HO…"

Content SHA-256

95c773ef985cb759…

Commit

31e5b0569d

Files

.gitignore
AGENTS.md
README.md
install.sh
config/DROP-README.txt
config/SELECTED-MODELS.txt
+3

About

Author: ARMedS ↗
Listed on: github:RongleCat/awesome-grok-bot ↗
Category (approx.): other
First seen: 2026-10-30
Last seen: 2026-10-30
URL: github.com ↗

Get the Botlens skill