Grok Workhorse — sandboxed coding workers MCP

Unofficial MCP daemon so a supervising Grok Bot can delegate coding tasks to sandboxed local workers (git worktrees + bubblewrap) that return diffs and test results.

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 50/100

Coverage: full
Checks run: Rule-based pattern scan
Files checked: 147
Findings: 4
Scanned: 2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗

Botlens score · 8 factors

50/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict	0.5/1	Caution
Code coverage	1/1	full
Rule findings	0/1	26 matched
No executable scripts	0/1	62 script file(s) of 147
Pinned source	1/1	commit/SHA-256 recorded
Named author	0/1	unknown
Recently seen	1/1	last seen 2026-10-30
Install path	0.5/1	source URL only

Scan details

Findings

Hand review 2026-11-01: Triage: runs shell commands by design; installs a service/startup entry. Credential-source sweep (browser cookies, Keychain, app token files, exfil hosts) found nothing; no evidence of data theft in the stored content.
asks for overly broad permissions: "…t id); a human confirms with `sudo workhorse approve <id>`, whic…"
markdown image with dynamic query (zero-click exfil): https://m8ven.ai/badge/mcp/mrchatam-grok-workhorse-1ma7qr?v=ffd6d76192d89e0e6d4a
Contains ads/promo (affiliate, course or sponsor links): warning only

Content SHA-256

37fcbdec56b66c96…

Commit

f0b63ac377

Files

.editorconfig
.gitignore
CHANGELOG.md
CODE_OF_CONDUCT.md
CONTRIBUTING.md
LICENSE
+141

About

Author: mrchatam ↗
Listed on: github:RongleCat/awesome-grok-bot ↗
Category (approx.): coding
First seen: 2026-10-30
Last seen: 2026-10-30
URL: github.com ↗

Get the Botlens skill