Ingeniería
First install: turn off Run on this computer (and traffic forwarding)
Phone → cloud bot → your Mac agent feels magical until prompt injection owns your desk.
Qué dolía
范凯说AI (@fankaishuoai) warns against letting cloud Grok Bot drive a Mac agent with skip-permissions: mail/web/X content can inject shell commands, local agents see SSH keys/.env/browser sessions, and the phone→remote path has no gate. His fix: turn off desktop "Run on this computer" and traffic forwarding; cloud bot only hands task notes; local agent decides how; sync via GitHub files—not reverse remote control. Not affiliated with xAI.
Qué instalar o crear
Lock desktop local-exec off; isolate cloud task notes from local execution via files.
Bots
Cloud dispatcher
Writes task notes only; never runs shell on your Mac.
Plugins
GitHub
Opcional
Rutinas
Ninguna en el primer uso. Mira primero una pasada manual.
El prompt
Esto es un consejo, no un prompt de sistema para pegar. El autor no publicó uno. Sigue los pasos del primer uso.
Primer uso
- 1Read https://x.com/fankaishuoai/status/2111978651797569600 (credit @fankaishuoai).
- 2In the Grok Bot desktop app: turn off Run on this computer and traffic forwarding through this Mac.
- 3Keep cloud bots on cloud computer only; put task briefs in a GitHub (or shared) file the local agent reads.
- 4If you need phone remote for a local agent, use a dedicated encrypted path—not cloud Grok Bot as a shell relay.
- 5Never enable skip-permissions for anything driven by untrusted mail/web/X content.
Valla de aprobación
Anything that touches your Mac stays under a local gate you control. Never skip-permissions for cloud-driven shells.
Qué ajustar
Steal the install checklist: local execute off, no traffic forward, GitHub handoff only.
Fuente
范凯说AI @fankaishuoai · Publicación original
Sin afiliación con xAI. No escribimos este prompt. Siguen aplicando las condiciones de las plantillas de terceros.
Paquete Pro
¿Quieres la configuración completa, no solo la idea?
Los paquetes Pro te dan el texto de la tarea, los prompts, los horarios y los tropiezos de los casos de uso más populares.