Headline numbers
| Removed as not-a-bot (posts, handles) | 230 |
| Marked Risky, hidden | 618 |
| Listed | 30,757 |
| Safe | 11,517 |
| Caution | 1,169 |
| Unscanned | 18,071 |
How much could we actually read?
Of 30,757 listed entries, we read the full code for 12,378, only a public description for 5,679, and nothing at all for 12,562. The biggest finding is not a threat. It is how much of this ecosystem cannot be inspected.
Why things got a Caution badge
| reads environment variables (where API keys live) | 671 |
| Hand review 2026-11-01 | 399 |
| spawns shell commands or evaluates code | 230 |
| asks for overly broad permissions | 228 |
| Contains ads/promo (affiliate, course or sponsor links) | 213 |
| downloads and runs a remote script (stealer installer pattern) | 174 |
Where listings come from (top 8)
| templatesgrokbot.com | 10,432 |
| grokdir.com | 7,841 |
| grokbot-templates.com | 5,827 |
| github:RongleCat/awesome-grok-bot | 1,980 |
| grokbot.dev | 1,895 |
| grokmarket.io | 713 |
| grokindex.dev | 682 |
| meetmybot.ai | 467 |
By category
| Category | Listed | Safe |
|---|
| Research | 2,984 | 1,471 |
| Coding & Dev | 2,981 | 1,550 |
| Design & Video | 2,004 | 718 |
| Writing & Content | 2,394 | 946 |
| Productivity | 2,968 | 963 |
| Finance & Crypto | 1,435 | 489 |
| Sales & CRM | 1,311 | 692 |
| Travel & Life | 898 | 96 |
| Learning | 1,202 | 267 |
| Marketing & Growth | 894 | 383 |
| Health & Fitness | 597 | 199 |
| Social Media | 777 | 139 |
| Agent Ops & Automation | 2,505 | 1,001 |
| Business & Ops | 2,365 | 735 |
| Security & Compliance | 1,464 | 885 |
| Shopping & Deals | 1,122 | 171 |
Method
Heuristic static scan of instructions and code for credential access, remote upload, shell execution, remote install scripts, unapproved sending, broad permissions and promotional links. Badges are heuristic, not guarantees. Details of Risky listings are withheld in this draft.
Read next
Browse by category: Research · Coding & Dev · Design & Video · Writing & Content · Productivity · Finance & Crypto