Chat with Grok models via xAI API. Supports Grok-3, Grok-3-mini, vision, and more.
Security Analysis
high confidenceThe skill's code, runtime instructions, and required environment variables are consistent with a Grok/xAI client: it only needs node and an XAI_API_KEY and talks to api.x.ai for chat, vision, and X search functionality.
The name/description (xAI / Grok) aligns with the included scripts: chat.js, models.js, and search-x.js. Requested binary (node) and primary env var (XAI_API_KEY) are exactly what a client for xAI would need.
SKILL.md and the scripts limit behavior to sending prompts/images to api.x.ai and listing models; image uploads are constrained to specific extensions. The scripts do not read arbitrary config files or extra environment variables beyond XAI_API_KEY/XAI_MODEL. There are no instructions to transmit data to endpoints other than api.x.ai.
No install spec — code files are bundled and executed via node. No downloads or archive extraction are performed by the skill itself; risk from installation is low.
Only XAI_API_KEY (and optional XAI_MODEL) are required. These credentials are proportional and necessary for the described functionality; no unrelated secrets or config paths are requested.
The skill does not request always:true and declares disable-model-invocation:true (no autonomous invocation). It does not modify other skills or system-wide config and does not persist credentials itself.
Guidance
This skill appears coherent and limited to acting as an xAI/Grok client. Before installing: (1) confirm you trust the skill source (the repository owner is unknown here); (2) only provide a dedicated xAI API key (avoid reusing broad or admin keys) and consider key rotation; (3) review the bundled scripts yourself if you have doubts — they read any image path you pass (so avoid sending sensitive images); (4) be aware network requests go to api.x.ai (inspect network policy if you require allowlists). If you need autonomous agent invocation, note this skill disables it by default.
Latest Release
v1.0.2
- Added a prominent link to external installation and use instructions at the top of the setup section. - No changes to functionality or commands; documentation update only.
Popular Skills
Published by @blueberrywoodsym on ClawHub
