Unitpost — official Grok Build email plugin

Official Unitpost plugin for Grok Build: send email with approval, manage contacts, campaigns, and domains.

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 62/100
Coverage
full
Checks run
Rule-based pattern scan
Files checked
5
Findings
4
Scanned
2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗
Botlens score · 8 factors
62/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict0.5/1Caution
Code coverage1/1full
Rule findings0/14 matched
No executable scripts1/10 script file(s) of 5
Pinned source1/1commit/SHA-256 recorded
Named author0/1unknown
Recently seen1/1last seen 2026-10-30
Install path0.5/1source URL only

Scan details

Findings
  • Hand review 2026-11-01: Triage: loads instructions from files/remote docs. Credential-source sweep (browser cookies, Keychain, app token files, exfil hosts) found nothing; no evidence of data theft in the stored content.
  • reads sensitive local files (keys, .env, cookies): "…utoreplied: boolean } }>({ payload: rawBody, // the RAW body secret: process.env.UNITPOSTWEBHOOKSECRET!, heade…"
  • asks for overly broad permissions: "…for HTML or brings their own. Full control, but the Design tab can't edi…"
  • sends user data (chats, inbox, memory, contacts) to an outside address: "… --html "<h1>Hello</h1>" unitpost contacts create --email customer@example.com --first-name Ada unitpost ema…"
Content SHA-256
a85c0c91673baac4…
Commit
4d5d1edba0
Files
.mcp.json
LICENSE
README.md
skills/unitpost/SKILL.md
.grok-plugin/plugin.json

About

Author
unitpostcom ↗
Listed on
github:RongleCat/awesome-grok-bot ↗
Category (approx.)
productivity
First seen
2026-10-30
Last seen
2026-10-30
URL
github.com ↗
Get the Botlens skill