Costco GTMKO Grok Bot plugin marketplace demo
GTMKO Field Engineering demo marketplace that installs a Costco-style shopping assistant plugin into Grok Bot via .grok-plugin marketplace manifests and an MCP skill.
Caution: review the findings below before installing.
CautionScan verdict · score 50/100
- Coverage
- full
- Checks run
- Rule-based pattern scan
- Files checked
- 19
- Findings
- 4
- Scanned
- 2026-11-01
Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.
Botlens score · 8 factors
50/100
Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.
| Scan verdict | 0.5/1 | Caution | |
|---|---|---|---|
| Code coverage | 1/1 | full | |
| Rule findings | 0/1 | 5 matched | |
| No executable scripts | 0/1 | 8 script file(s) of 19 | |
| Pinned source | 1/1 | commit/SHA-256 recorded | |
| Named author | 0/1 | unknown | |
| Recently seen | 1/1 | last seen 2026-10-30 | |
| Install path | 0.5/1 | source URL only |
Scan details
- Findings
- reads environment variables (where API keys live) in plugins/costco-shop/mcp-server/index.ts: "…ction apiBase(): string { const raw = process.env.COSTCO_DEMO_API_BASE?.trim(); if (!ra…"
- reads environment variables (where API keys live) in plugins/costco-shop/mcp-server/run.mjs: "…, "PLUGIN_ROOT"]) { prefer(runnerAt(process.env[key])); } prefer(runnerAt(process.c…"
- spawns shell commands or evaluates code in plugins/costco-shop/mcp-server/run.mjs: "…plugin. */ import { spawn } from "node:child_process"; import { existsSync, readdirSync, rea…"
- reads environment variables (where API keys live) in plugins/costco-shop/mcp-server/run.test.mjs: "… encoding: "utf8", env: { ...process.env, COSTCO_MCP_PRINT_PATHS: "1" }, });…"
- Content SHA-256
- 839eb3aae4ee9876…
- Commit
- 7d878a4452
- Files
- .gitignore
README.md
scripts/generate-logo.py
.cursor-plugin/marketplace.json
plugins/costco-shop/.mcp.json
plugins/costco-shop/package-lock.json
+13
About
- Author
- beadelnegro-cursor ↗
- Listed on
- github:RongleCat/awesome-grok-bot ↗
- Category (approx.)
- agentops
- First seen
- 2026-10-30
- Last seen
- 2026-10-30
- URL
- github.com ↗