Archive228/foreman

Crew harness/CLI ( foreman ) for hosted Grok Bot teams: declared packs, inspect/sync against gbot JSON, effect ledger, shift reports, and a .grok-plugin (MIT, 2★).

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 50/100
Coverage
full
Checks run
Rule-based pattern scan
Files checked
193
Findings
4
Scanned
2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗
Botlens score · 8 factors
50/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict0.5/1Caution
Code coverage1/1full
Rule findings0/111 matched
No executable scripts0/1135 script file(s) of 193
Pinned source1/1commit/SHA-256 recorded
Named author0/1unknown
Recently seen1/1last seen 2026-10-30
Install path0.5/1source URL only

Scan details

Findings
  • Hand review 2026-11-01: Triage: documents or runs a curl|bash-style installer; runs shell commands by design; makes outbound API calls (to its own or configured services); loads instructions from files/remote docs. Credential-source sweep (browser cookies, Keychain, app token files, exfil hosts) found nothing; no evidence of data theft in the stored content.
  • reads sensitive local files (keys, .env, cookies): "…es a reference**: it does not read your keychain to draw a dashboard, and it w…"
  • text hidden with CSS (invisible to humans, visible to the model)
  • uploads data to a remote server in test/board.test.ts: "…g.status, 404); const post = await fetch(`${base}/api/board`, { method: "POST" }); assert.equal(post.status, 405)…"
Content SHA-256
52f9d92d5add66cb…
Commit
35b4e1d044
Files
.gitignore
LICENSE
NOTICE
PLUGIN_AUDIT.md
README.md
foreman.config.example.json
+187

About

Author
Archive228 ↗
Listed on
github:RongleCat/awesome-grok-bot ↗
Category (approx.)
coding
First seen
2026-10-30
Last seen
2026-10-30
URL
github.com ↗
Get the Botlens skill