SCOOP: Grok Bot code reveals controls to flag outgoing emails and texts for review

A static inspection of xAI's Grok Bot 0.79.4 Windows client found separate sampling controls; the bundled general, Auto Review and unsent rates are zero.

By · Published

RUNTIMEWIRE INVESTIGATION — Original analysis

Original reporting by RuntimeWire, based on reverse engineering, testing.

Why it matters

Agents that send mail, invite attendees, share files and place calls create records beyond a chat transcript. A client-side labeling taxonomy across nine services shows evaluation can be targeted at exactly those consequential actions, so users and enterprise admins need to know the live sample rates, the fields captured, retention and reviewer access rather than relying on a zero fallback that remote configuration can replace.

Reporting record

Finding

Grok Bot 0.79.4 contains remotely configurable outbound-action labeling and sampling controls, with packaged general send, Auto Review send and unsent sampling rates set to zero.

How we verified

Methods: reverse engineering, testing.

The signed Windows client’s app.asar contains the grok_bot_external_send_labeling_config schema, fallback service and tool taxonomy, and packaged sampling rates.

RuntimeWire statically inspected Grok Bot.exe and resources/app.asar, searched for the configuration name, and examined the schema and fallback values without executing the bundle or sending an outbound action.

Tested versions:

  • 0.79.4

Reproduction

RuntimeWire was not able to independently reproduce the finding.

Inspect Grok Bot 0.79.4’s resources/app.asar and search dist/electron-main/main-app.cjs for grok_bot_external_send_labeling_config; examine the schema and packaged fallback values.

Company response

RuntimeWire requested comment; the company had not responded by publication time.

A code editor displays a Grok configuration file beside a Windows logo, with a labeled Grok pouch, magnifying glass, and papers marked “SCHEMA,” “TAXONOMY,” and “ANALYSIS.”

A static inspection of xAI's Grok Bot 0.79.4 Windows client found separate sampling controls; the bundled general, Auto Review and unsent rates are zero.

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Reader comments

Conversation for this story loads after sign-in.