MonstarX plugin — ship full-stack apps from Grok Bot and Cursor
MIT Cursor Marketplace plugin that connects Grok Bot and Cursor to MonstarX's hosted MCP, so the agent can push, build, preview and publish full-stack apps with a built-in backend, admin panel and REST APIs.
Caution: review the findings below before installing.
CautionScan verdict · score 50/100
- Coverage
- full
- Checks run
- Rule-based pattern scan
- Files checked
- 13
- Findings
- 4
- Scanned
- 2026-11-01
Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.
Botlens score · 8 factors
50/100
Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.
| Scan verdict | 0.5/1 | Caution | |
|---|---|---|---|
| Code coverage | 1/1 | full | |
| Rule findings | 0/1 | 7 matched | |
| No executable scripts | 0/1 | 3 script file(s) of 13 | |
| Pinned source | 1/1 | commit/SHA-256 recorded | |
| Named author | 0/1 | unknown | |
| Recently seen | 1/1 | last seen 2026-10-30 | |
| Install path | 0.5/1 | source URL only |
Scan details
- Findings
- Hand review 2026-11-01: Triage: adds a third-party MCP server; loads instructions from files/remote docs. Credential-source sweep (browser cookies, Keychain, app token files, exfil hosts) found nothing; no evidence of data theft in the stored content.
- reads sensitive local files (keys, .env, cookies): "…ackage.json` lives). Do not upload `node_modules`, build output, or `.env` files. 3. On success, call `…"
- installs a third-party MCP server (tool-poisoning vector): "… turn on Developer mode, then add a custom MCP server for `https://monstarx.com/mcp` with OAuth. …"
- sends user data (chats, inbox, memory, contacts) to an outside address: "…formation → Review details**. Include the login URL `https://monstarx.com/login`, email, pa…"
- Content SHA-256
- f3681c41761a1ff8…
- Commit
- 59f0ddb12e
- Files
- .gitignore
LICENSE
README.md
mcp.cursor.json
mcp.json
plugin.json
+7
About
- Author
- monstarx-tech ↗
- Listed on
- github:RongleCat/awesome-grok-bot ↗
- Category (approx.)
- agentops
- First seen
- 2026-10-30
- Last seen
- 2026-10-30
- URL
- github.com ↗