AgentMail → Cursor Grok Bot email forwarder

Svix-signed webhook forwarder that turns AgentMail inboxes into a Bearer-auth email channel for Cursor Grok Bot agents.

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 50/100
Coverage
full
Checks run
Rule-based pattern scan
Files checked
20
Findings
4
Scanned
2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗
Botlens score · 8 factors
50/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict0.5/1Caution
Code coverage1/1full
Rule findings0/16 matched
No executable scripts0/16 script file(s) of 20
Pinned source1/1commit/SHA-256 recorded
Named author0/1unknown
Recently seen1/1last seen 2026-10-30
Install path0.5/1source URL only

Scan details

Findings
  • Hand review 2026-11-01: Forwards AgentMail email to a Grok Bot webhook (forwarder/api/index.js); handles your email by design.
  • sends user data (chats, inbox, memory, contacts) to an outside address: "…e assistant reachable at AgentMail inbox **{{BOT_INBOX_ADDRESS}}** (EXAMPLE format: `assistant@example.com`). You speak as the operator…"
  • reads environment variables (where API keys live) in forwarder/api/index.js: "… return; } } const cursorUrl = process.env.CURSOR_WEBHOOK_URL; const cursorKey =…"
  • spawns shell commands or evaluates code in forwarder/api/index.js: "…const angle = /<([^<>@\s]+@[^<>@\s]+)>/.exec(s); if (angle) return angle[1].trim().…"
Content SHA-256
cd8af13f0ff07207…
Commit
97e234d01b
Files
.gitignore
LICENSE
README.md
SECURITY.md
forwarder/.gitignore
forwarder/package-lock.json
+14

About

Author
jeffhuber ↗
Listed on
github:RongleCat/awesome-grok-bot ↗
Category (approx.)
productivity
First seen
2026-10-30
Last seen
2026-10-30
URL
github.com ↗
Get the Botlens skill