Blog

What shipped, and what it means. Technical notes on Skarn's coverage and detection, each one grounded in a command you can run and a source you can check.

Grok Bot's audit log is the chat transcript. Skarn reads it.

Skarn now reads Grok Bot session stores - the same local scan engine that already covers eight other assistants, extended to xAI's persistent desktop agent.

The leak is in the connector setup, not the model

Why a plaintext token in an MCP config file is a different, earlier leak than a pasted secret in a chat - and what `skarn vet` already catches there.