Capri Host — remote Grok Build ACP host

Capri Host remote ACP host that connects a browser UI to your local Grok Build agent.

SafeScan verdict · score 56/100

Coverage: full
Checks run: Rule-based pattern scan
Files checked: 195
Findings: 4
Scanned: 2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗

Botlens score · 8 factors

56/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict	1/1	Safe
Code coverage	1/1	full
Rule findings	0/1	5 matched
No executable scripts	0/1	5 script file(s) of 195
Pinned source	1/1	commit/SHA-256 recorded
Named author	0/1	unknown
Recently seen	1/1	last seen 2026-10-30
Install path	0.5/1	source URL only

Scan details

Findings

Hand review 2026-11-01: Triage: hits are README badge images, docs wording or generic env/path heuristics; a credential-source sweep (browser cookies, Keychain, app token files, webhook/paste exfil hosts, exec of encoded code) found nothing in the stored content.
asks for overly broad permissions: "…tifier + 证书指纹,所以脚本不碰信任设置(那一步要 sudo)。验证 CI 出的包用了同一身份:`codesign …"
touches credential/key files in packaging/macos/import-cert.sh: "…ake-app.sh 将退回 ad-hoc 签名。" exit 0 fi KEYCHAIN="${RUNNER_TEMP:-/tmp}/capri-signing.key…"
touches credential/key files in packaging/macos/make-cert.sh: "… "$arg" == "--force" ]] && FORCE=1 done KEYCHAIN="$HOME/Library/Keychains/login.keychain…"

Content SHA-256

6079bde634b61b92…

Commit

0d9437fab7

Files

.gitignore
LICENSE
README.md
packaging/macos/README.md
packaging/macos/import-cert.sh
packaging/macos/make-app.sh
+189

About

Author: AgentsHarness ↗
Listed on: github:RongleCat/awesome-grok-bot ↗
Category (approx.): design
First seen: 2026-10-30
Last seen: 2026-10-30
URL: github.com ↗

Get the Botlens skill