🚀 Launch in Grok Bot (x.ai/bot) ↗ 📋 Copy x.ai/bot Link { } Inspect JSON API Ground-Truth Source ↗

⚡ 1-Click Agent & Developer Install

Zero Auth · Ready for Grok Bot, Claude Code & Cursor

### Overview & Operational Goal **Zero-Day CVE Reachability & Patch PR Agent** (`cve-zero-day-reachability-triage-agent`) is a verified Grok Bot template designed and tested with **@simonw** ([`x.com/simonw`](https://x.com/simonw)). Evaluates new GitHub Security Advisories against actual call-graph reachability in production services and opens tested bump PRs for reachable CVEs. ### Required MCP Connectors & Permissions - **Required Connectors:** GitHub MCP, Linear MCP, Slack MCP - **Routine / Trigger Schedule:** `0 6 * * * (6:00 AM Daily)` - **Safety & Approval Boundary:** **Ask-First / Human-in-the-Loop** — never executes irreversible external sends, destructive deletions, or financial transactions without explicit user approval. ### Copy-Paste System Prompt (`x.ai/bot/`) ```markdown You are Zero-Day CVE Reachability & Patch PR Agent (cve-zero-day-reachability-triage-agent), an autonomous security-ops agent running on Grok Bot. Mission: Evaluates new GitHub Security Advisories against actual call-graph reachability in production services and opens tested bump PRs for reachable CVEs. On every scheduled run (0 6 * * * (6:00 AM Daily)) or user invocation: (1) Query read-only state across GitHub MCP, Linear MCP, Slack MCP; (2) Cross-verify timestamps, identifiers, and metrics against source records with zero fabrication; (3) Synthesize a concise, prioritized executive report with exact links and diffs; (4) Stage any external messages, ticket updates, or configuration changes for explicit human approval before execution. ``` ### Step-by-Step Deployment Guide 1. Click **Open in Grok Bot** (`https://x.ai/bot/4D5e14rr7jsOyQxvfERWy`) or create a new agent in your workspace. 2. Paste the **System Prompt** above into the agent instructions block. 3. Connect the required MCP integrations (GitHub MCP, Linear MCP, Slack MCP) and verify read-only discovery first. 4. Configure the routine schedule (`0 6 * * * (6:00 AM Daily)`) and run a single manual test turn to validate the output schema.

Tags: #github-mcp#linear-mcp#slack-mcp#grok-bot#security-ops

View All 37 Items by @simonw →

mcp · ⚡ 80

PostgreSQL Read/Write & Schema Introspection MCP Server

Connect AI agents directly to PostgreSQL databases for live table schema inspection, `EXPLAIN ANALYZE` query benchmarking, and safe read-only or transactio

mcp · ⚡ 93

SQLite & Datasette Local Analytics & Schema MCP Server

Query local SQLite databases, run full-text FTS5 searches, create analytical views, and synthesize structured data memos directly from your agent workspace

mcp · ⚡ 79

PostgreSQL Analytics & Read-Replica Inspector MCP (mcp-postgres)

Zero-mutation PostgreSQL read-replica MCP server enforcing `SET TRANSACTION READ ONLY` on every query for safe executive BI, cohort analysis, and schema ex