t3-capacity
Warn
Audited by Socket on Oct 16, 2026
1 alert found:
SecuritySecurityscripts/t3-capacity.mjs
MEDIUMSecurityMEDIUM
scripts/t3-capacity.mjs
This CLI reads local provider usage and account information and reports matching instances. It sends the stored Grok login bearer key to GROK_USAGE_URL when that environment variable is set, without validating the destination; an untrusted override can therefore expose the credential. The default destination is https://cli-chat-proxy.grok.com/v1/billing?format=credits. This is a security warning requiring review of the runtime environment; no other clear malicious behavior is evident.
Confidence: 96%Severity: 72%
Audit Metadata