Work
Three security checks for a shared bot computer
All your bots share one computer, browser, and set of logins, so one risky template can reach everything.
What hurt
Ken (@Ken_LinkWell) ran a security scan and the first real finding was a Claude login in a file every bot could read. He notes separate bots are not a security boundary and third-party templates run with the same logins, then lists three checks to do today. Not affiliated with xAI.
What to install or create
Add Ask-first rules for sending, publishing or buying, and changing routines. Remove any allow-automatically rule that lets a bot create automations. Sign out of every site in the shared browser that no bot needs, starting with your AI accounts.
Bots
No new bot. Follow the first-run steps.
Plugins
None on day one. Follow the first-run steps.
Files
Check: no secrets (API keys, AI logins) in files every bot can read.
Routines
None on the first run. Watch one manual pass first.
The prompt
This is a tip, not a pasteable system prompt. The author did not publish one. Follow the first-run steps.
First run
- 1Read https://x.com/Ken_LinkWell/status/2107070920607023565 (credit @Ken_LinkWell).
- 2In Auto-review settings, add Ask-first rules for sending, for publishing or buying, and for changing routines.
- 3Remove any allow-automatically rule that lets a bot create automations on its own.
- 4In the shared browser, sign out of every site no bot needs, starting with your AI accounts.
- 5Ask a bot to search its computer for credential files and move or delete what shouldn't be there.
Approval fence
Sending, publishing, buying, and routine changes should all stop for your approval.
What to tweak
Treat every bot and template as sharing your whole login set, and put the gates in settings, not in prompts.
Source
Ken @Ken_LinkWell · Original post
Not affiliated with xAI. We did not write this prompt. Third-party template terms still apply.
Pro pack
Want the full setup, not just the idea?
Pro packs give you the job text, prompts, schedules and pitfalls for popular use-cases.