B — Some risk signals Graded October 16, 2026Minor concerns worth a quick check.Based on public adoption and transparency signals as of October 16, 2026. Our opinion, not a code audit or security guarantee.
AI agent skill · General
invisible_dots
Open-source, self-hosted alternative to OpenAI Dots, Grok Bot. Built to be undetectable by anti-bot systems.
Bottom line: Signal-based grade (4/7 points): very widely starred on GitHub, public source code. This reflects adoption and transparency, not a code review.
- Popularity score
- 50/100
- Rank
- #117 of 500
- GitHub stars
- 32.1k
What it does
invisible_dots is an open-source, self-hosted tool designed to automate interactions with web services while evading detection by anti-bot systems. It appears to be built as an alternative to services like OpenAI's Dots or Grok Bot, enabling programmatic task automation.
Who it’s for
Developers and builders who need to automate web interactions in environments with anti-bot detection. Organizations evaluating self-hosted automation alternatives to third-party services.
Copy-paste setup
Check these steps against the project’s own instructions before running anything.
Verify against the repo README at https://github.com/feder-cr/invisible_dots (opens external site) for current installation instructions, as the exact setup method is not publicly documented in standard package managers. Likely installation via git clone and local configuration, but specifics should be confirmed directly from the repository.
Risks
- Detection evasion intent: Explicitly designed to bypass anti-bot systems, which may violate Terms of Service or legal obligations for targeted platforms
- Legitimacy uncertainty: High potential for misuse in unauthorized web scraping, credential stuffing, or other adversarial activities; unclear legitimate use cases
- Supply chain trust: 32K GitHub stars suggest adoption, but limited npm presence (0 weekly downloads) raises questions about production readiness and security vetting
- Credentials exposure: Self-hosted deployments require careful handling of authentication tokens; risk of local credential compromise or log exfiltration
- Legal/compliance risk: Use may violate CFAA, GDPR, or target platform ToS; organization bears liability for misuse
How to stay secure
Least-privilege permissions
- Run the agent with restricted system user account; deny file system access outside deployment directory
- Limit API token scope to read-only or minimal required permissions; rotate credentials every 30 days
- Disable shell execution and subprocess spawning unless explicitly required; audit any code paths with
exec()or similar functions
Network isolation
- Deploy on air-gapped or DMZ network segment; restrict outbound connections to explicitly whitelisted target domains only
- Use network egress filtering to prevent exfiltration of credentials, request logs, or scraped data to unauthorized destinations
- Disable localhost listener exposure; require VPN or private network access for all agent management interfaces
Monitoring
- Log all outbound requests with full URL, headers, and response metadata; alert on unexpected domains or request patterns
- Track authentication token usage and rotation; flag any token access outside normal operational windows
- Monitor process resource consumption and network bandwidth for anomalies indicating unauthorized scraping or credential stuffing activity
Red flags to watch for
- Requests to credential verification endpoints, password reset flows, or authentication services
- Rapid sequential requests to the same target or distributed requests across multiple targets within short timeframes
- Agent configuration changes that disable logging, widen network permissions, or increase token privileges
- Code commits or dependency updates that introduce obfuscation, encryption of request payloads, or evasion techniques
Alternatives
- Playwright / Puppeteer: Legitimate browser automation frameworks for transparent, authorized web testing and automation
- Selenium: Established open-source tool for automated testing with clear visibility and governance
- RPA platforms (UiPath, Automation Anywhere): Enterprise solutions with compliance and audit trails
- Official APIs: Native integrations with target services, eliminating the need for detection evasion