CoS Link — cross-account Grok Bot Chief of Staff protocol

Protocol and reference plugins for pairing Grok Bot Chiefs of Staff across user accounts with owner-approved grants (marketplace PR pending).

View source ↗

SafeScan verdict · score 56/100

Coverage: full
Checks run: Rule-based pattern scan
Files checked: 43
Findings: 4
Scanned: 2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗

Botlens score · 8 factors

56/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict	1/1	Safe
Code coverage	1/1	full
Rule findings	0/1	4 matched
No executable scripts	0/1	14 script file(s) of 43
Pinned source	1/1	commit/SHA-256 recorded
Named author	0/1	unknown
Recently seen	1/1	last seen 2026-10-30
Install path	0.5/1	source URL only

Scan details

Findings

reads environment variables (where API keys live) in src/cos_link/api.py: "…igured_public_url() -> str: value = os.environ.get("COS_LINK_PUBLIC_URL", "http://loca…"
reads environment variables (where API keys live) in src/cos_link/cli.py: "…r("Run `cos-link init` first.") os.environ.setdefault("COS_LINK_PUBLIC_URL", f"htt…"
reads environment variables (where API keys live) in src/cos_link/mcp_server.py: "…_from_env() -> CoSLinkClient: url = os.environ.get("COS_LINK_URL", "") token = os.…"
reads environment variables (where API keys live) in examples/live_mcp.py: "… env={key: value for key, value in os.environ.items() if key != "COS_LINK_PUBLIC_URL"…"

Content SHA-256

13b37fc6ee8e0a66…

Commit

72ad414bf6

Files

.dockerignore
.gitignore
.mcp.json
CONTRIBUTING.md
Dockerfile
LICENSE
+37

About

Author: logan-robbins ↗
Listed on: github:RongleCat/awesome-grok-bot ↗
Category (approx.): business
First seen: 2026-10-30
Last seen: 2026-10-30
URL: github.com ↗

Get the Botlens skill