Grokbot Vehicle Fleet

Community MCP plugin + skills for vehicle status and confirm-gated commands via the official Fleet API (bring your own app, tokens, proxy). Read-only by default.

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 62/100
Coverage
full
Checks run
Rule-based pattern scan
Files checked
96
Findings
4
Scanned
2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗
Botlens score · 8 factors
62/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict0.5/1Caution
Code coverage1/1full
Rule findings0/16 matched
No executable scripts0/168 script file(s) of 96
Pinned source1/1commit/SHA-256 recorded
Named author1/1matthew-rutledge-dev
Recently seen1/1last seen 2026-10-30
Install path0.5/1source URL only

Scan details

Findings
  • Contains ads/promo (affiliate, course or sponsor links): warning only
  • reads environment variables (where API keys live) in scripts/auth-helper.mjs: "…st(v.trim()); const env = (k) => (unset(process.env[k]) ? undefined : process.env[k].trim()…"
  • uploads data to a remote server in scripts/auth-helper.mjs: "…t aud = audience(); const res = await fetch(TOKEN_URL, { method: "POST", headers: { "Content-Type": "appli…"
  • spawns shell commands or evaluates code in mcp/vehicle-fleet/test/auth-helper.test.ts: "…ct"; import { execFileSync } from "node:child_process"; import path from "node:path"; import …"
Content SHA-256
71249bfe59d8fb0f…
Commit
c342b033c0
Files
.gitattributes
.gitignore
.mcp.json
BACKLOG.md
CHANGELOG.md
LICENSE
+90

About

Author
matthew-rutledge-dev ↗
Listed on
github ↗
Category (approx.)
agentops
First seen
2026-10-30
Last seen
2026-10-30
URL
github.com ↗
Get the Botlens skill