Grok Build Reportedly Uploads Entire Repositories
jedisct1 · x · 2026-07-14
xAI's Grok Build CLI has been found to upload entire Git repositories to a Google Cloud bucket, including private codebases and unmasked secrets.
Researchers highlighted that on a 12GB test repository, the tool uploaded 5.1GB of data, whereas the actual coding task only required 192KB. It scraped the entire repository in the working directory rather than just the files needed for the task.
xAI subsequently halted the uploads via a hidden server-side switch disablecodebaseupload: true, but as of the post's publication, they had yet to publicly clarify the scope of the data, retention periods, or whether the already uploaded content had been deleted.
More from coding & agent
- Coding agents are heading toward an AI-writes, AI-reviews, human-approves workflow — aftahi_ai · 2026-07-22
- oMLX 0.5.2 adds Mac menu-bar stats, low-bit decode kernels, and faster downloads — awnihannun · 2026-07-22
- GitHub review bot hits its PR limit and forces a 39-minute cooldown — DanielLockyer · 2026-07-22
- Max reasoning effort appears to be mobile-only in Codex Remote, not desktop — GabGarrett · 2026-07-22
- A Reddit demo argues online stores should expose carts and pricing through MCP — gelembjuk · 2026-07-22
- Open-source AI SDK provider routes Vercel apps through a local Codex subscription — lgrammel · 2026-07-22