Desk Atlas — physical Grok Bot desk buddy

Orange Pi + Whisplay HAT desk buddy that STT-webhooks into a Grok Bot Atlas teammate and speaks replies via on-device TTS.

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 50/100
Coverage
full
Checks run
Rule-based pattern scan
Files checked
49
Findings
4
Scanned
2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗
Botlens score · 8 factors
50/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict0.5/1Caution
Code coverage1/1full
Rule findings0/122 matched
No executable scripts0/124 script file(s) of 49
Pinned source1/1commit/SHA-256 recorded
Named author0/1unknown
Recently seen1/1last seen 2026-10-30
Install path0.5/1source URL only

Scan details

Findings
  • Hand review 2026-11-01: software/speak/face.py:9 runs exec(zlib.decompress(base64...)). Decoded as data (not run): a 46 KB sphere-face animation that only reads DESK_ATLAS_FACE_* env vars and calls ffmpeg (decoded lines 36-44, 1128); no network or secrets. Caution for hiding code; audio goes to xAI STT (software/ears/stt_xai.py:57).
  • reads sensitive local files (keys, .env, cookies): "… need its own key. Mouth/ears read `XAI_API_KEY` and sender keys from the Pi `.env` only. Examples and docs sta…"
  • downloads and runs a remote script (stealer installer pattern): "… SSH as usual, then: ```bash curl -fsSL https://tailscale.com/install.sh | sh sudo tailscale up ``` Browse…"
  • asks for overly broad permissions: "…eckout of this repo: ```bash sudo apt-get install -y openscad …"
Content SHA-256
b06dd8e02cf61556…
Commit
b1a7a64abd
Files
.gitignore
LICENSE
README.md
hardware/case/README.md
hardware/case/dims.json
software/speak/ack_text.py
+43

About

Author
etjones45 ↗
Listed on
github:RongleCat/awesome-grok-bot ↗
Category (approx.)
business
First seen
2026-10-30
Last seen
2026-10-30
URL
github.com ↗
Get the Botlens skill