Ask your bot for a security review of an email that passed every check
- Level Beginner
- Setup~30 min (estimated)
- Evidence Strong evidence
- CostNot stated in source
- No-codeYes
What they did
An email from [email protected] landed in a Tesla engineer's inbox. It passed SPF, DKIM and DMARC (the checks that confirm who sent an email) and showed the blue check, but something felt off, so he asked his Grok Bot to do a security review. It found a hidden phishing link, explained why every safety check had passed, and wrote a report to xAI with a proposed fix. He then had it add a security routine that checks his email for anything phishy going forward.
How it went
He says it found the hidden link and the explanation, and since then the routine has flagged a few more emails as "Likely Phishing", which were more obvious ones.
Worth knowing
- Self-reported X post with screenshots and wide reach (3,000+ likes); one example, so it doesn't show how reliably it catches other scams. Don't click a suspicious link to test it yourself.
Prompt
Cleaned version rewritten from the source — not a direct quote.
This email looks legitimate but something feels off: [paste or forward the email]. Do a security review without clicking anything. Check the sender, the authentication results and every link, including hidden ones, and tell me whether it's phishing and why the normal checks did or didn't catch it. Then set up a daily routine that flags likely phishing in my inbox.
Recommended
Try it in Grok Bot
- Copy the prompt (button below).
- Open Grok Bot chat and paste it. Replace any [bracketed] placeholders.
- Connect the listed tools (Email) as connectors when Grok Bot asks.
- If the task repeats, ask: "Make this a daily routine."
Alternatives: the same prompt works in Claude, ChatGPT Agent, OpenClaw.
Set it up
Tools: Email · Stack: Grok Bot
- Read the original source for full context.
- Connect the tools your agent needs.
- Paste the prompt and replace [bracketed] placeholders.
- Run once manually and check the output before scheduling it.
Generic suggested steps, not from the source.
Evidence
Self-reported X post with screenshots and wide reach (3,000+ likes); one example, so it doesn't show how reliably it catches other scams. Don't click a suspicious link to test it yourself
Source: X · 2026-10-14 · Verified by us: not yet · Report broken or outdated