Privacy-hardened fork of xai-org/grok-build

Fork of xai-org/grok-build synced to 1.0.38 with telemetry disabled and extra web_search providers; ships Linux/macOS binaries.

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 50/100

Coverage: full
Checks run: Rule-based pattern scan
Files checked: 937
Findings: 4
Scanned: 2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗

Botlens score · 8 factors

50/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict	0.5/1	Caution
Code coverage	1/1	full
Rule findings	0/1	4 matched
No executable scripts	0/1	8 script file(s) of 937
Pinned source	1/1	commit/SHA-256 recorded
Named author	0/1	unknown
Recently seen	1/1	last seen 2026-10-30
Install path	0.5/1	source URL only

Scan details

Findings

Hand review 2026-11-01: Fork binary installed via curl|bash (install.sh:2).
downloads and runs a remote script (stealer installer pattern): "… # macOS (arm64) > curl -fsSL https://raw.githubusercontent.com/carmilea/grok-build/main/install.sh | sh > ``` > > Upgrade an existing…"
link has a template placeholder that fills in user data: https://api.mixpanel.com/{track,engage}
downloads and runs a remote script in install.sh: "…grok-build (fork) release binary. # # curl -fsSL https://raw.githubusercontent.com/carmilea/grok-build/main/install.sh | sh # # Honors GROK_INSTALL_DIR to overr…"

Content SHA-256

bafcf59e6efe6fc0…

Commit

9296aab2fe

Files

.gitignore
AGENTS.md
CLAUDE.md
CONTRIBUTING.md
Cargo.toml
LICENSE
+931

About

Author: carmilea ↗
Listed on: github:RongleCat/awesome-grok-bot ↗
Category (approx.): security
First seen: 2026-10-30
Last seen: 2026-10-30
URL: github.com ↗

Get the Botlens skill