Grok Build CLI Accused of Uploading Entire Repos
WesEklund · x · 2026-07-13
A post refuted the claim that "this is by design," citing external analysis indicating that the Grok Build CLI uploads the entire repository as a git bundle to the backend, rather than just the files actually read in the current session.
Key risks include:
- The entire repo might be uploaded even if prompted to "not read any files"
- It may contain complete history and all tracked files
- Even files like .env could be included
The author advises against using it on sensitive or private repositories, recommending isolated environments, strict .gitignore configurations, and testing first. They also mentioned that the team is working on improving transparency and options.
More from coding & agent
- Gergely Orosz: Shipping 10x PRs With AI Agents, Sites Fill With Small Regressions — ducha_aiki · 2026-09-11
- Kernel integrates Stripe Link so browser agents can pay with one API call — jeff_weinstein · 2026-09-11
- Same Echo Maze prompt, three frontier models: all passed visually but shipped the same hidden bug — eyishazyer · 2026-09-11
- The full prompt-to-3D-game workflow: Hyper3D Rodin MCP plus Codex, no reference image — FellMentKE · 2026-09-11
- Building a 3D landing page with GPT-6 Astra and Hyper3D Rodin MCP, no modeling needed — FellMentKE · 2026-09-11
- Astra storyboards plus Minimax H3 per-shot generation boost video success rates — Hailuo_AI · 2026-09-11