omri-marketplace — personal Grok Build plugin marketplace

Personal vendored marketplace of plugins and skills with native .grok-plugin catalogs for Grok Build, Claude, Codex, and Cursor.

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 50/100
Coverage
full
Checks run
Rule-based pattern scan
Files checked
135
Findings
4
Scanned
2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗
Botlens score · 8 factors
50/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict0.5/1Caution
Code coverage1/1full
Rule findings0/18 matched
No executable scripts0/126 script file(s) of 135
Pinned source1/1commit/SHA-256 recorded
Named author0/1unknown
Recently seen1/1last seen 2026-10-30
Install path0.5/1source URL only

Scan details

Findings
  • Hand review 2026-11-01: Triage: loads instructions from files/remote docs. Credential-source sweep (browser cookies, Keychain, app token files, exfil hosts) found nothing; no evidence of data theft in the stored content.
  • reads sensitive local files (keys, .env, cookies): "…*)` — network exfiltration - `Read(.env)`, `Read(.env.*)` — credentia…"
  • link carries a long data parameter: https://quickchart.io/chart?c={urllib.parse.quote(json.dumps(config
  • reads sensitive local files (keys, .env, cookies): "…he reason. ## Configuration Read `config.json` at startup. Key settings: -…"
Content SHA-256
31d8a54a5ff84341…
Commit
9be199c794
Files
.gitignore
README.md
RELEASES.md
.agents/plugins/marketplace.json
scripts/install-cli-for-ci.sh
scripts/release_plugin.py
+129

About

Author
omriariav ↗
Listed on
github:RongleCat/awesome-grok-bot ↗
Category (approx.)
agentops
First seen
2026-10-30
Last seen
2026-10-30
URL
github.com ↗
Get the Botlens skill