Grok Bot for Raycast (Sand gateway)
Unofficial Raycast extension that sends tasks to Grok Bot teammates via the undocumented Sand HTTP gateway on the Bot computer (not the grok.com chat API).
Caution: review the findings below before installing.
CautionScan verdict · score 50/100
- Coverage
- full
- Checks run
- Rule-based pattern scan
- Files checked
- 56
- Findings
- 4
- Scanned
- 2026-11-01
Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.
Botlens score · 8 factors
50/100
Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.
| Scan verdict | 0.5/1 | Caution | |
|---|---|---|---|
| Code coverage | 1/1 | full | |
| Rule findings | 0/1 | 5 matched | |
| No executable scripts | 0/1 | 42 script file(s) of 56 | |
| Pinned source | 1/1 | commit/SHA-256 recorded | |
| Named author | 0/1 | unknown | |
| Recently seen | 1/1 | last seen 2026-10-30 | |
| Install path | 0.5/1 | source URL only |
Scan details
- Findings
- Hand review 2026-11-01: Triage: runs shell commands by design; makes outbound API calls (to its own or configured services); loads instructions from files/remote docs. Credential-source sweep (browser cookies, Keychain, app token files, exfil hosts) found nothing; no evidence of data theft in the stored content.
- reads sensitive local files (keys, .env, cookies): "….md#platforms). ## Before you open a pull request Do not commit tokens, `gateway.env`, or `.env` files. Do not pas…"
- asks for overly broad permissions: "…y port only, for example: `sudo tailscale serve --bg 1340` …"
- spawns shell commands or evaluates code in src/lib/avatar-thumbnail.ts: "…crypto"; import { execFile } from "node:child_process"; import { appendFileSync, existsSync, …"
- Content SHA-256
- f952f89d6f43ef52…
- Commit
- 57c8fc53fd
- Files
- .gitignore
.nvmrc
.prettierignore
.prettierrc
CHANGELOG.md
CONTRIBUTING.md
+50
About
- Author
- MaisonnatM ↗
- Listed on
- github:RongleCat/awesome-grok-bot ↗
- Category (approx.)
- writing
- First seen
- 2026-10-30
- Last seen
- 2026-10-30
- URL
- github.com ↗