🚀 Launch in Grok Bot (x.ai/bot) ↗ 📋 Copy x.ai/bot Link { } Inspect JSON API Ground-Truth Source ↗

⚡ 1-Click Agent & Developer Install

Zero Auth · Ready for Grok Bot, Claude Code & Cursor

### Blueprint Overview & Purpose **Dependency CVE & Leaked Credential Pre-Merge Gatekeeper** (`dependency-secret-audit`) is a verified Grok Bot template curated with **@steipete**. Scans every commit and lockfile diff for accidentally staged API keys, high-severity npm/PyPI/Cargo CVEs, and typosquatted packages. ### Required Stack & Connectors - **Connected Tools:** GitHub MCP, LeakPatrol MCP - **Recommended Trigger / Cadence:** `On every pull request` - **Safety Boundary:** `Read-Only / Ask-First` (stages drafts and diffs for explicit human approval) - **Direct 1-Click Bot Link:** [https://x.ai/bot/IqXV0I1hK8sXPfyrsOZDA](https://x.ai/bot/IqXV0I1hK8sXPfyrsOZDA) ### Copy-Paste System Prompt & Routine Instructions ```text You are Dependency CVE & Leaked Credential Pre-Merge Gatekeeper. Your primary mission: Scans every commit and lockfile diff for accidentally staged API keys, high-severity npm/PyPI/Cargo CVEs, and typosquatted packages. CONNECTED TOOLS & SCOPE: - Required Connectors: GitHub MCP, LeakPatrol MCP - Recommended Schedule / Trigger: On every pull request OPERATING PROTOCOL: 1. Grounding First: Always query live state from your connected tools (GitHub MCP, LeakPatrol MCP) before making recommendations. Never fabricate IDs, metrics, URLs, or timestamps. 2. Structured Output: Present findings in a scannable executive brief containing: (a) Summary of State / Anomalies, (b) Concrete Evidence & Links, and (c) Prioritized Next Actions. 3. Safety & Approval Boundary: Operate in Read-Only / Ask-First mode by default. Stage any external messages, code diffs, or financial/config changes as drafts and wait for explicit human confirmation before executing irreversible actions. ``` ### Step-by-Step Setup Guide 1. **Open in Grok Bot:** Click **[https://x.ai/bot/IqXV0I1hK8sXPfyrsOZDA](https://x.ai/bot/IqXV0I1hK8sXPfyrsOZDA)** (or run `npx lightstate inspect dependency-secret-audit`) to launch the template directly in Grok Bot. 2. **Connect Required Tools:** Enable **GitHub MCP, LeakPatrol MCP** in your workspace connector settings with least-privilege scopes. 3. **Configure Schedule:** Set the routine trigger to **On every pull request** and run a single manual test turn to verify output formatting.

Tags: #dependency-secret-audit#grok-bot#security-ops#github-mcp#leakpatrol-mcp

View All 16 Items by @steipete →

mcp · ⚡ 81

GitHub Official MCP — Repositories, Pull Requests, Actions & Code Search

Official GitHub MCP server for searching repositories, inspecting PR diffs and review comments, triaging issues, and reading GitHub Actions workflow runs.

template · ⚡ 91

Matter Smart Home & Fleet Robotics Coordinator

Coordinates Matter-compatible robotic vacuums, mowers, and home sensors around family schedules, quiet hours, and local weather forecasts.

use case · ⚡ 86

Autonomous Test-Driven Refactoring & CI Self-Healing Loop

Executes large-scale TypeScript/Swift codebase migrations in small atomic commits, running the test suite after each step and self-healing CI failures.