共享电脑会放大权限风险
Shared machine blast radius
要点
- 同一账号下所有 Bot 共用一台电脑、浏览器会话和命令行凭证
- 删掉某个 Bot 并不会收回它已经登录过的应用权限
- 不要把多个 Bot 当成安全隔离，每个应用给独立账号
- 把停止线写进 Description，审批拦不住已经跑完的动作
- 花钱上限要设在产品外，金钱和客户回复留给人处理
原帖开头
whoever leaked this has bigger balls than sense SpaceXAI shipped five hireable workers for $200 a month, then wrote the catch into its own Grok Bot documentation and left the page up: all five run on one computer, so one sign-in hands the browser session, the files and the comma …
