grokdrive is an unofficial Claude Code extension: a dispatcher CLI, an optional PreToolUse gate hook (strict mode only), and a doctrine skill. It routes heavy work to the Grok Build CLI headless with --always-approve — an auto-approved, autonomous shell over the working directory. Treat dispatched specs as capable of arbitrary local execution.

1. --always-approve body — every grokdrive dispatch can run shell, edit files, and call tools under the Grok Build CLI. Do not dispatch secrets or sensitive code without redaction. Prefer sandbox/worktree isolation when the working tree is high-stakes.
2. Default is soft, not a sandbox — soft mode does not constrain Claude tools. Strict mode (grokdrive on --strict) constrains Claude's four mutation tools (Write / Edit / MultiEdit / NotebookEdit) only. Neither mode stops Bash-based file writes, MCP writes, or writes by spawned sub-agents.
3. No credentials in the repo — never commit .env, tokens, session dumps, or real secrets. State lives under ~/.claude/.grokdrive-state/ (local only).
4. External body is a cloud service — Grok runs remotely. Do not put credentials, private keys, or unreleased IP into specs without redaction.

Open a GitHub issue with the security label, or email the maintainers via the org contact on GitHub. Do not attach real secrets; use synthetic fixtures.

Best-effort on the latest main / latest release tag only. There is no paid SLA.