Guzli MCP plugin (Cursor / Grok Bot)

Remote Guzli MCP connector for Cursor / Grok Bot (streamable HTTP + OAuth) to operate no-code chat/voice agents and a unified inbox.

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 56/100

Coverage: full
Checks run: Rule-based pattern scan
Files checked: 28
Findings: 3
Scanned: 2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗

Botlens score · 8 factors

56/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict	0.5/1	Caution
Code coverage	1/1	full
Rule findings	0/1	3 matched
No executable scripts	0.5/1	2 script file(s) of 28
Pinned source	1/1	commit/SHA-256 recorded
Named author	0/1	unknown
Recently seen	1/1	last seen 2026-10-30
Install path	0.5/1	source URL only

Scan details

Findings

Hand review 2026-11-01: Every tool-poisoning / hidden-text / obfuscation hit read in full: they are safety or truthfulness rules, normal CSS UI styles, eval/benchmark wording, data-URI images or test fixtures, not hidden instructions. Caution for capabilities: mcp_untrusted.
asks for overly broad permissions: "…t match their request. - [ ] Complete permission checks for the selected recip…"
installs a third-party MCP server (tool-poisoning vector): "…arketplace when available, or add a custom remote MCP server with URL `https://mcp.guzli.com/mcp`. The exact …"

Content SHA-256

8a0862afcf694510…

Commit

e4bf421904

Files

.gitignore
LICENSE
README.md
scripts/validate-claude.sh
scripts/validate-template.mjs
.cursor-plugin/marketplace.json
+22

About

Author: kodeine ↗
Listed on: github:RongleCat/awesome-grok-bot ↗
Category (approx.): agentops
First seen: 2026-10-30
Last seen: 2026-10-30
URL: github.com ↗

Get the Botlens skill