nez-harness — new-grok-bot design skill

Everyday multi-host agent harness with a dedicated new-grok-bot skill that unit-tests roles before writing a paste-ready Grok Bot prompt.

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 50/100
Coverage
full
Checks run
Rule-based pattern scan
Files checked
1243
Findings
4
Scanned
2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗
Botlens score · 8 factors
50/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict0.5/1Caution
Code coverage1/1full
Rule findings0/19 matched
No executable scripts0/1106 script file(s) of 1243
Pinned source1/1commit/SHA-256 recorded
Named author0/1unknown
Recently seen1/1last seen 2026-10-30
Install path0.5/1source URL only

Scan details

Findings
  • Hand review 2026-11-01: Every tool-poisoning / hidden-text / obfuscation hit read in full: they are safety or truthfulness rules, normal CSS UI styles, eval/benchmark wording, data-URI images or test fixtures, not hidden instructions. Caution for capabilities: remote_code.
  • hides actions from the owner (tool-poisoning hallmark): "…m to tick business + VAT ID. Do not tell the user they "cannot avoid VAT" when …"
  • reads sensitive local files (keys, .env, cookies): "…or ACP agent inside bb, and reload its Cursor config (rules, skills, mcp.json). Use when the user says "res…"
  • downloads and runs a remote script (stealer installer pattern): "…dd/mkfs, sudo rm, fork bombs, curl\|sh, git push --force, gh repo de…"
Content SHA-256
a9e25cf7e69f3396…
Commit
b03d14086e
Files
.gitignore
.gitmodules
README.md
codex/AGENTS.md
codex/README.md
codex/config.toml
+1237

About

Author
ernestngenest ↗
Listed on
github:RongleCat/awesome-grok-bot ↗
Category (approx.)
agentops
First seen
2026-10-30
Last seen
2026-10-30
URL
github.com ↗
Get the Botlens skill