Watchtower — read-only security officer for your Grok Bot roster
Apache-2.0 skill pack for the shared Grok Bot computer that vets templates before install, scores your setup 0–100 across skills, MCP configs, browser sessions and credentials, polls every Bot for risky routines and memo
SafeScan verdict · score 56/100
- Coverage
- full
- Checks run
- Rule-based pattern scan
- Files checked
- 229
- Findings
- 4
- Scanned
- 2026-11-01
Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.
Botlens score · 8 factors
56/100
Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.
| Scan verdict | 1/1 | Safe | |
|---|---|---|---|
| Code coverage | 1/1 | full | |
| Rule findings | 0/1 | 16 matched | |
| No executable scripts | 0/1 | 169 script file(s) of 229 | |
| Pinned source | 1/1 | commit/SHA-256 recorded | |
| Named author | 0/1 | unknown | |
| Recently seen | 1/1 | last seen 2026-10-30 | |
| Install path | 0.5/1 | source URL only |
Scan details
- Findings
- Hand review 2026-11-01: Security watchdog; hits are hardening notes (CHANGELOG.md:82-86).
- reads sensitive local files (keys, .env, cookies): "…ter (WT-T004), content only: `cat` counts only a file named exactly `.env` (read, or redirected into); …"
- asks for overly broad permissions: "…on, anything but a prompt or `sudo` before it on its line (`xarg…"
- prompt-injection / jailbreak phrasing: "…t read it, run ..." and `<!-- ignore all previous instructions -->` gave 0 findings and vet …"
- Content SHA-256
- 8fd3b4f3bbfb7127…
- Commit
- 2d95988352
- Files
- .gitignore
CHANGELOG.md
EGRESS.md
LICENSE
Makefile
README.md
+223
About
- Author
- ken-aisec ↗
- Listed on
- github:RongleCat/awesome-grok-bot ↗
- Category (approx.)
- security
- First seen
- 2026-10-30
- Last seen
- 2026-10-30
- URL
- github.com ↗