Grok30m — VS Code/Cursor fork of Grok Build UI

Community Grok Build VS Code fork with editor-tab chat, Sessions sidebar, and ACP stdio to the grok CLI.

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 50/100
Coverage
full
Checks run
Rule-based pattern scan
Files checked
415
Findings
4
Scanned
2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗
Botlens score · 8 factors
50/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict0.5/1Caution
Code coverage1/1full
Rule findings0/17 matched
No executable scripts0/1378 script file(s) of 415
Pinned source1/1commit/SHA-256 recorded
Named author0/1unknown
Recently seen1/1last seen 2026-10-30
Install path0.5/1source URL only

Scan details

Findings
  • Hand review 2026-11-01: Triage: documents or runs a curl|bash-style installer. Credential-source sweep (browser cookies, Keychain, app token files, exfil hosts) found nothing; no evidence of data theft in the stored content.
  • downloads and runs a remote script (stealer installer pattern): "…ncluding Cursor SSH remotes: `curl -fsSL https://raw.githubusercontent.com/thirtym/grok30m/grok30m/scripts/bootstrap.sh | bash` (Windows: `scripts/boo…"
  • sends or posts automatically without approval: "…en community pulls ahead. - **Auto-publish when community moves.** Daily…"
  • asks for overly broad permissions: "…Bypass permissions", Codex's "Full access" and Muse's "Allow all". - **…"
Content SHA-256
9c13355fe4fa8cd8…
Commit
3779a31b8d
Files
.gitattributes
.gitignore
.vscode-test.mjs
.vscodeignore
ACP-MCP-ask.md
AGENTS.md
+409

About

Author
thirtym ↗
Listed on
github:RongleCat/awesome-grok-bot ↗
Category (approx.)
coding
First seen
2026-10-30
Last seen
2026-10-30
URL
github.com ↗
Get the Botlens skill