Grok Bot can charge your saved card without per-purchase approval
Citing xAI docs, the author warns Grok Bot's Vault auto-fills cards at checkout with no per-purchase approval and no way to undo a completed charge.
THERE'S NO WAY THIS IS SAFE. Grok Bot can pay with your card without asking you first. Straight from xAI's own docs: → save your card in the Bot's Vault → "a card saved in Vault fills in at checkout without a separate approval each time" → hit "Always allow" once and that kind of purchase stops asking → an approval can't undo a purchase that already went through Elon, October 15: "If Grok Bot makes a mistake with a purchase or leaks your card, SpaceX will make you whole." xAI's terms, updated 3 days earlier: you are responsible for "Agentic Actions." Same problem on the coding side. Claude Code skills run with your permissions. NVIDIA scanned 31,132 agent skills: 26.1% had vulnerabilities, 5.2% looked malicious. Agents act as you now. The article below starts with the scan, then the 10 skills I'd actually let run on my machine. Would you give an agent your card?
This post quotes another post: x.com/kyzorox/status/2111897393041932316