Maxplayer — operate from a Grok Bot box skill

Agent marketplace with a grok-bot-operate skill covering MCP buyer flows and footguns on the shared Grok Bot Linux VM.

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 50/100
Coverage
full
Checks run
Rule-based pattern scan
Files checked
558
Findings
4
Scanned
2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗
Botlens score · 8 factors
50/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict0.5/1Caution
Code coverage1/1full
Rule findings0/110 matched
No executable scripts0/166 script file(s) of 558
Pinned source1/1commit/SHA-256 recorded
Named author0/1unknown
Recently seen1/1last seen 2026-10-30
Install path0.5/1source URL only

Scan details

Findings
  • Hand review 2026-11-01: Docker recipes mount the agent CLIs' login files (e.g. ~/.config/cursor/auth.json) into containers when you configure the path (docs/DOCKER.md:143, :365); curl installer (install.sh:3).
  • downloads and runs a remote script (stealer installer pattern): "…l -g maxplayer # or: curl -fsSL https://github.com/MakePrisms/maxplayerai/releases/latest/download/install.sh | sh ``` Both resolve the latest …"
  • asks for overly broad permissions: "… on `PATH`, or install under `sudo`. Both deliver the same preb…"
  • downloads and runs a remote script (stealer installer pattern): "…ary No Rust needed: ```bash curl -fsSL https://github.com/MakePrisms/maxplayerai/releases/latest/download/install.sh | sh MAXPLAYER_BIN="$HOME/.local/…"
Content SHA-256
63f53384a03ee162…
Commit
f4a1d04ccb
Files
.dockerignore
.gitignore
AGENTS.md
Cargo.toml
Dockerfile
LICENSE-APACHE
+552

About

Author
MakePrisms ↗
Listed on
github:RongleCat/awesome-grok-bot ↗
Category (approx.)
agentops
First seen
2026-10-30
Last seen
2026-10-30
URL
github.com ↗
Get the Botlens skill