Grok Bot 安全文档：保存的卡结账免确认

lostinazeroy @lostinazeroy原推发布于 2026.10.28

在 X 上打开原推

holy f*ck, grok bot can pay with your saved card and never ask straight from xai's security docs: "a card saved in vault fills at checkout without a separate approval each time" it's not the only line like that: → every bot you make shares one computer, one browser, one set of logins → "always allow" saves a rule for every future match → the reviewer model skips memory writes say these 3 lines to your bot tonight: 1. "before any payment, purchase or subscription, stop and ask me" 2. "never send, post or delete anything until i approve the exact draft" 3. "list every login you can use and every site you're signed in to" then lock it in settings → auto-review → custom rules. the 10-minute setup is below send this to whoever just made their first bot

这条是引用着另一条写的：x.com/lostinazeroy/status/2115385382799913440