Skip to content

[Bug] Grok CLI "You are Grok ... released by xAI" self-ID 触发 Devin content policy (permission_denied) #223

Description

@warelik

版本 / Version

v3.5.0 (4824e57)

部署方式 / Deployment

Self-hosted, DEVIN_CONNECT path, WINDSURFAPI_NEUTRALIZE_CLIENT_ID=1

问题描述 / What happens

Grok CLI opens its system prompt with:

You are Grok 4.5 released by xAI. You are an interactive CLI tool that helps users with software engineering tasks.

plus an <executing_actions_with_care>…</executing_actions_with_care> safety block.
Live A/B on the DEVIN_CONNECT upstream: this exact self-ID line trips Devin's
content policy
(permission_denied); the same request with a generic assistant
line passes. Same fingerprint-matching family as the MCP/identity blocks in #213 /
#214.

复现 / Steps to reproduce

  1. Route a Grok-CLI request (its stock system prompt) through the proxy.
  2. permission_denied ("content policy").
  3. Replace the You are Grok … released by xAI line with a neutral assistant line → passes.

客户端 / Client

Grok CLI (any Grok version digit).

期望 / Expected

neutralizeClientIdentity neutralizes the Grok/xAI self-ID (and strips the
competitor-specific <executing_actions_with_care> block), like the existing
a1–a5 rules — gated by the same WINDSURFAPI_NEUTRALIZE_CLIENT_ID switch.

Fix in the linked PR.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething is broken or behaves incorrectlyfixed已修复 等待确认

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions