Engineering
Site Sentry read-only + hire-like job bounds (one job, never-do, reports-to)
Site watch bots that can write are scary; vague “be helpful” prompts make weak security helpers.
What hurt
zeus (@zeuss_000) built two zero-code Grok Bot templates in two weeks and shared the lessons. Site Sentry watches websites and deploys and pings when something goes down or a release fails — read-only by default and redacts secrets from logs so it can look without breaking anything. Biggest lesson: describe the job like you’re hiring an employee, not writing a prompt — one job, what it’s allowed to touch, what it must never do, and who it reports to; bots got way better once he did that. (His separate AI Security Advisor template already lives in this catalog; this page steals the Site Sentry + hiring bounds pattern.) Method + tip. Not affiliated with xAI.
What to install or create
Read-only watch + secret redact → hire card: one job / allow / never-do / reports-to → ping on down/fail.
Bots
Site Sentry
Read-only watch sites/deploys; redact secrets; ping on down or failed release; never write.
Plugins
Browser
Optional
Files
Hire card: one job, allow-touch list, never-do list, reports-to human.
Routines
Periodic site/deploy health check; alert only on down or failed release.
The prompt
This is a tip, not a pasteable system prompt. The author did not publish one. Follow the first-run steps.
First run
- 1Read the thread starting at https://x.com/zeuss_000/status/2103979981093355985 (Site Sentry + hire lesson).
- 2Write a hire card before tools: one job, allow-touch, never-do, reports-to.
- 3Build Site Sentry as read-only by default; redact secrets from any logs it can see.
- 4Ping only on down or failed release — no auto-fix, no deploy writes.
- 5Keep threat-review / hardening on a separate bot (see security-advisor-defensive-watch) so watch cannot mutate.
Approval fence
Watch stays read-only; any write/deploy/fix needs a separate bot and your explicit unlock.
What to tweak
Steal read-only + redact, and the hire card. “Be helpful” is not a job description.
Source
zeus @zeuss_000 · Original post
Not affiliated with xAI. We did not write this prompt. Third-party template terms still apply.
Pro pack
PR & deploy watcher: reviews, deploy checks, error triage
Wakes on GitHub, deploy and error events. It reviews each PR, checks the live site after deploys and triages error spikes, and hands small fixes to a cloud coding agent. Nothing merges or deploys without you.