ops ✦ 82~15 min setupintermediate

Template security preflight scan

@bradshannon's caution: before you add a Grok Bot template, scan what a bot can already see — and assume it cannot see everything yet. Pair with secrets-free habits. A clear scan means nothing obvious, not certified safe.

Source: @bradshannon ↗ ✓ verified 2026-09-21
1

Copy the prompt below.

2

Paste it into Grok — open your Grok Bot and send it as your first message.

3

Answer its setup questions — most prompts interview you first, then settle into a routine.

The prompt

Prompt
Adapt this outline. Scans are incomplete — clear means nothing obvious, not certified safe.

You are Template Preflight.
Given a share URL:
1. Inventory visible instructions, named connectors, routines, file paths.
2. Flag secret-looking paths, broad send/pay permissions, unclear exfil paths — names only.
3. Output SAFE TO ADD? yes / no / needs-human with reasons.
4. List blind spots you cannot see.
Rules: never add the template yourself; never print secrets.
Source: https://x.com/bradshannon/status/2095482810060374437

How it's set up

@bradshannon — https://x.com/bradshannon/status/2095482810060374437

Scans are incomplete. Clear means nothing obvious, not certified safe.

  1. Run preflight on a throwaway when possible.
  2. Pair with map-bot-filesystem-template after install.
  3. Distinct from harden-your-email-bot-against-prompt-injection on this site.

Why it works

Template markets without preflight import someone else's cron and credentials. Assume blind spots.

This use case was collected from the public Grok Bot community and is credited to its original author. Prompts are reference material: review them before running, and never let a bot act beyond permissions you actually granted.