A founder's security watch: Claude Code lists his dependencies, Grok Bot checks for new risks 4x a day
On the day the PHP2Shell flaws went public, a founder shared his setup for keeping up with security news without a security team. He had Claude Code list every platform, package, version and third-party dependency his company uses, then gave that list to Grok Bot as a reference file. Grok Bot checks X, industry sites and trusted security researchers four times a day for anything that could affect those items and pings him when something needs attention. Next on his list: updating the file whenever the stack changes, and opening GitHub issues automatically for things that need a fix.
Why it matters
Small teams usually hear about a critical bug days late. A list of what you actually run, plus a scheduled check against the news, closes that gap cheaply.
Who it's for
Founders and small dev teams without a dedicated security person.
How to try it
- Ask Claude Code in your repo: "List every platform, package and version, and every third-party service this project depends on, as a plain file."
- Give that file to your Grok Bot and ask it to check trusted security sources four times a day for anything that affects an item on it.
- Have it message you only with a source link and the affected item, and you decide what to patch.
- Re-run the inventory whenever you add a tool or bump a major version.
Plan & availability: Needs Claude Code (a Claude Pro plan or higher) and Grok Bot. This is one user's setup; we haven't tested it.
Note: reported by users on X; we haven't independently confirmed it works in the current version.
Source: @TheCraigHewitt on X
Written by AgentStackList from the original post. Checked Oct 22, 2026. Features, plans and availability can change, so confirm on the source before you rely on it.
grok-botclaude-codesecuritydependencies
More Grok Bot tricks
- Grok Bot on Mac can now read your texts, draft your emails and fill your calendar, with your OK app by app · Nov 12
- Grok Bot 1.0 turns your AI into a coworker: it sits in Slack and Teams, joins your calls and offers to pick up work before anyone asks · Nov 11
- Tell Grok Bot "grab me ice cream and chips for movie night" and Gopuff delivers it: checkout now happens inside the chat · Nov 11
- Grok Bot can now get inside your private network (safely): it joins your Tailscale tailnet to reach internal tools · Nov 10