discord-grok-bot-kit

Drop-in Discord listener that wakes a Grok Bot webhook on the owner’s mention, with keep-alive routines and a stdlib reply CLI.

View source ↗
SafeScan verdict · score 56/100
Coverage
full
Checks run
Rule-based pattern scan
Files checked
10
Findings
4
Scanned
2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗
Botlens score · 8 factors
56/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict1/1Safe
Code coverage1/1full
Rule findings0/14 matched
No executable scripts0/13 script file(s) of 10
Pinned source1/1commit/SHA-256 recorded
Named author0/1unknown
Recently seen1/1last seen 2026-10-30
Install path0.5/1source URL only

Scan details

Findings
  • Hand review 2026-11-01: Triage: hits are README badge images, docs wording or generic env/path heuristics; a credential-source sweep (browser cookies, Keychain, app token files, webhook/paste exfil hosts, exec of encoded code) found nothing in the stored content.
  • sends user data (chats, inbox, memory, contacts) to an outside address: "…ermissions **View Channel*, **Send Messages*, **Read Message History*, and **Add Reactions* (bitmask `68672`): `https://discord.com/oauth2/authorize?c…"
  • link has a template placeholder that fills in user data: https://discord.com/api/v10/channels/{channel}/messages
  • reads environment variables (where API keys live) in relay.py: "… "") -> str: return env.get(key) or os.environ.get(key) or default env = load_env(CF…"
Content SHA-256
c728500910a2602b…
Commit
270ebad707
Files
.gitignore
LICENSE
README.md
ensure-up.sh
relay.py
requirements.txt
+4

About

Author
larry-fuqua ↗
Listed on
github:RongleCat/awesome-grok-bot ↗
Category (approx.)
agentops
First seen
2026-10-30
Last seen
2026-10-30
URL
github.com ↗
Get the Botlens skill