DiMilan shares a standing instruction: have your main Grok Bot run a prompt-injection safety check across every bot that can read email, calendar, files, or web pages before those connectors stay live.
An Indie Hackers founder almost shipped a no-auth “delete all users” endpoint Claude cheerfully wrote for a supposed test env—then built Thorim, a one-command layer of specialist agents/skills that makes coding agents challenge unsafe requests.
Cary Scardina’s Grok Bot checks headers, links, and attachment hashes with open-source tools and pre-scans domains/downloads so humans and downstream agents never open the low-hanging phishing bait first.
Brett had Grok Bot and Grok complete credit freezes at all three bureaus, an IRS protection PIN, data-broker opt-outs, 24/7 security alert watching, a daily news brief, bill checks, and family calendar dates in a single evening.
Anvith’s Day 8 Grok Bot challenge: stall a fake PayPal scammer, compare shoe prices across sites for the cheapest pair, and fill refund forms plus follow-ups he’d been putting off.
A company built a Grok Bot purchasing agent that uses Ramp to mint a different virtual credit-card number for each transaction instead of sharing one corporate card.
Security-minded user runs a Grok Bot that scans inbound email for phishing and social-engineering signals, checks headers, links, and attachment hashes against open-source tools, and pre-screens domains/downloads before humans or other bots open them.
Community JEV workflow: ask Grok Bot to create a JEV LAB folder on its cloud computer, install the JEV skill so an AI bodyguard checks risky commands and catches hidden instructions before the bot acts.
Two spoofed 'Netflix — payment on hold' emails hit inbox (hidden chars in sender name, reversed subject); Muse caught them, reported both to Microsoft's phishing desk, and deleted them.