Grok Build CLI Suspected of Uploading Entire Repos
Tiancaixinxin · x · 2026-07-13
Packet sniffing reveals that Grok Build CLI appears to bundle entire repositories (including full Git history) into a git bundle and uploads them to xAI's Google Cloud Storage.
More critically, files read by the CLI are also transmitted, potentially exposing .env secrets. Even when explicitly prompted "not to read any files" or when "Improve the model" is disabled, the uploading behavior persists.
The original post notes that there is no clear explanation for this mechanism in official announcements or changelogs, advising against using it for sensitive repositories until an update clarifies the issue.
Related event: xAI's Grok Build CLI Allegedly Uploads Entire Repos and Secrets(5 posts)→
More from coding & agent
- Jane Street's Yinsky shares tips for making codebases agent-friendly: types, property tests, formal methods — sh_reya · 2026-10-27
- Celesto launches CI runners nearly 90% cheaper than GitHub Actions, with agent sandboxes — aniketmaurya · 2026-10-27
- Runway launches App Studio: build no-code creative apps that generate image, video and audio — runwayml · 2026-10-27
- Supabase founders on rebuilding the backend for a billion AI-built apps — Latent Space · 2026-10-27
- Dev scans 5,000 MCP servers daily: 10% dead, 30% auth-gated, then ClaudeBot shows up — art2meta · 2026-10-27
- Solo dev ships national park sim with Claude in 6 months, Opus spawned 560 Haiku subagents to translate it — idun0 · 2026-10-27