What should a bot never do?
Write the anti-jobs in the Bot description and in each skill: do not send, publish, delete, purchase, or change a production system without your approval. Official docs say sensitive actions can stop for approval, and that you should add narrow ask-first rules for those actions. Passwords, two-factor codes, and CAPTCHA checks are yours. Use the computer takeover. Do not paste secrets into the chat. If a site blocks automation, the Bot should hand you the step instead of working around it. Two Bots are not two vaults. They share one computer.
Independent Botski guide. Not official xAI documentation. Not endorsed by X, xAI, or Grok.
Эта страница пока на английском
Ask first, every time
- Sending a message, email, or post.
- Paying, purchasing, or changing a billing setting.
- Deleting files, records, or a Bot you might still need.
- Editing a live site, production settings, or customer accounts.
- Using stale data when the source is missing. Official examples say to report the failure instead.
Official docs
The answer above stands on its own. These are the official pages it was checked against.
- Grok Bot FAQ — fetched 2026-09-21
- Skills and routines — Approval boundaries
- Get started — Takeover for secrets