Nesq Bot self-hosted teammates

Source-available self-hosted alternative to Grok Bot: isolated Linux desktops, real browser, human gates before consequential actions, and handover ledgers.

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 50/100

Coverage: full
Checks run: Rule-based pattern scan
Files checked: 343
Findings: 4
Scanned: 2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗

Botlens score · 8 factors

50/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict	0.5/1	Caution
Code coverage	1/1	full
Rule findings	0/1	14 matched
No executable scripts	0/1	259 script file(s) of 343
Pinned source	1/1	commit/SHA-256 recorded
Named author	0/1	unknown
Recently seen	1/1	last seen 2026-10-30
Install path	0.5/1	source URL only

Scan details

Findings

Hand review 2026-11-01: CI installs rustup via curl (.github/workflows/macos.yml:232); credential hits are SecureStore usage (apps/mobile/src/storage/secure.ts:4).
reads sensitive local files (keys, .env, cookies): "…means a file # added later (a dump, a notebook full of credentials, an `.env`) cannot reach # the context …"
asks to disable safety checks or approvals: "…ath destroys it. - **A way to disable the approval gate globally.** Per-action c…"
link has a template placeholder that fills in user data: http://localhost:$${API_HOST_PORT:-8080}/api/health

Content SHA-256

2fef1f030a31910b…

Commit

0243fdd3da

Files

.dockerignore
.editorconfig
.gitattributes
.gitignore
.npmrc
.prettierignore
+337

About

Author: Nesqual-Tech ↗
Listed on: github:RongleCat/awesome-grok-bot ↗
Category (approx.): business
First seen: 2026-10-30
Last seen: 2026-10-30
URL: github.com ↗

Get the Botlens skill