Grok Build Bridge — Codex plugin for local grok CLI

Codex CLI plugin with a bundled MCP server to delegate reviews and tasks to the local Grok Build CLI.

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 50/100
Coverage
full
Checks run
Rule-based pattern scan
Files checked
61
Findings
4
Scanned
2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗
Botlens score · 8 factors
50/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict0.5/1Caution
Code coverage1/1full
Rule findings0/127 matched
No executable scripts0/133 script file(s) of 61
Pinned source1/1commit/SHA-256 recorded
Named author0/1unknown
Recently seen1/1last seen 2026-10-30
Install path0.5/1source URL only

Scan details

Findings
  • Hand review 2026-11-01: Credential-path regexes are protection lists (mcp-server/src/tools/shared.mjs:226, mcp-server/src/lib/git-context.mjs:10); requires the Grok Build CLI installed via curl|bash (README.md:20); API fallback posts to the model API.
  • downloads and runs a remote script (stealer installer pattern): "…talled and logged in: ``` curl -fsSL https://x.ai/cli/install.sh | bash grok login ``` - The Open…"
  • reads environment variables (where API keys live) in tests/api-fallback.test.mjs: "…tries(changes)) { previous.set(key, process.env[key]); if (value === undefined) del…"
  • reads environment variables (where API keys live) in tests/fake-grok-fixture.mjs: "…gs, cwd: process.cwd(), active: process.env.GROK_BUILD_COMPANION_ACTIVE || null }…"
Content SHA-256
42dad3dab958f896…
Commit
1373aa297d
Files
.gitignore
.mcp.json
AGENTS.md
CHANGELOG.md
CLAUDE.md
CODE_OF_CONDUCT.md
+55

About

Author
Reederey87 ↗
Listed on
github:RongleCat/awesome-grok-bot ↗
Category (approx.)
coding
First seen
2026-10-30
Last seen
2026-10-30
URL
github.com ↗
Get the Botlens skill