Skip to content
CHOPSGitHubvia botdirectory.ai
Card face drawn from the listing · 2:3no artwork supplied
OpsOPS-007Free to use

Codebase Hardening Auditor

Set up a new bot for me that audits a codebase that shipped fast and now needs hardening.

Hire would ask a Grok Bot host on your own Mac or iPhone to spawn this bot with the same portrait and description. It is not built: no local host is contacted, and spawning is a Layer B use that needs the uploader’s express opt-in first — being in the free lane does not grant it.Push would hand this card to a Grok Bot host running on your own machine, over MCP, so the bot appears there configured exactly as the card describes. No host is contacted, nothing is uploaded, and the gallery is never in the path — the payload is documented in src/lib/integrate/contract.ts.Selling, trading and spawning are designed but not built. No prices are set, no payment provider is connected, and no card can be listed — listing requires an express Layer B opt-in from the uploader that this version has no way to give.

Collect works, and is stored against your account. Hire and Trade are a finished surface over an unfinished system — nothing here charges, spawns or signs anything.

The prompt

As published on botdirectory.ai. Reproduced from their public API, unedited.

Set up a new bot for me that audits a codebase that shipped fast and now needs hardening. Walk me through connecting GitHub, then configure it: given a repository, work through this fixed 20-point checklist in order — duplicate utility functions, secrets committed in config files, functions over 400 lines, components over 200 lines, dead code, silent or empty catch blocks, API calls in the UI missing loading/error states, database queries written directly in route handlers, synchronous I/O in request handlers, list endpoints with no pagination, inconsistent API response shapes, floats used for money instead of integer cents, dates stored as plain strings instead of ISO 8601, external calls with no retry/backoff, stale comments that no longer match the code, unvalidated user input, API routes missing auth checks, missing indexes on frequently queried columns, N+1 queries, and third-party SDKs initialized in more than one place. For each check, search the codebase, list every finding with its file and line, and either apply the fix or propose it clearly — report "none found" rather than skipping a check, never omit one. Finish with a summary table showing fixed / proposed / none-found across all 20 checks, and always ask before making any sweeping change that touches many files. Ask me which repository and branch to run against and whether it may open pull requests directly or must hand me a diff to review first, do a dry run against a repo I point you to, then save it.

Integrations it names

GitHub

Listing credit

This listing comes from botdirectory.ai, imported through their public API and contributed there by @nate-stellar. It is not a Bots of Grok original, and we claim nothing over it.

View the original entry

Specification

Type
Bot card
Genre
Ops
Free to use
Yes
Origin
Imported · botdirectory.ai
Set
Unreleased
Edition
Aspect ratio
2:3 (locked)
Master target
2560 × 3840
Published
18 Aug 2026
Views
0
Copyrightnot granted
Stays with @nate-stellar. No assignment — under UrhG § 29 copyright is not transferable.
Layer A — hostinggranted
Non-exclusive hosting licence granted on upload: store, show, technical copies, moderate.
Model trainingnot granted
Not licensed, to us or to anyone else. Layer A expressly excludes it.
Layer B — sell / spawnnot granted
Requires a separate express opt-in from the uploader. Never implied by a silent upload, and impossible to give in v1.

A buyer would get a use licence, not the copyright. Trade-ins not granted. Ein Erwerber erhielte eine Nutzungslizenz, nicht das Urheberrecht. Inzahlungnahme wird nicht eingeräumt.

Not listed · market closed

Selling, trading and spawning are designed but not built. No prices are set, no payment provider is connected, and no card can be listed — listing requires an express Layer B opt-in from the uploader that this version has no way to give. What is planned.

More in Ops

Back office, close, runbooks and the weekly packet.

All ops