Grok Build Reportedly Uploads Entire Repositories
jedisct1 · x · 2026-07-14
xAI's Grok Build CLI has been found to upload entire Git repositories to a Google Cloud bucket, including private codebases and unmasked secrets.
Researchers highlighted that on a 12GB test repository, the tool uploaded 5.1GB of data, whereas the actual coding task only required 192KB. It scraped the entire repository in the working directory rather than just the files needed for the task.
xAI subsequently halted the uploads via a hidden server-side switch disablecodebaseupload: true, but as of the post's publication, they had yet to publicly clarify the scope of the data, retention periods, or whether the already uploaded content had been deleted.
More from coding & agent
- Two real 'company brains' opened up live: Gorgias' in-house Cortex vs Slite — femke_plantinga · 2026-09-11
- The browser main thread is expensive: a practical guide to JavaScript and CSS animation cost — jh3yy · 2026-09-11
- Claude Unlimited: open-source local proxy rotates accounts and API keys to keep Claude Code sessions alive — Similar_Injury_6739 · 2026-09-11
- Inspired by OpenAI's 10,000-agent run, dev open-sources a crowdsourced agent problem-solving platform — Benjaminsen · 2026-09-11
- Lucid: open-source Mac app keeps your laptop awake only while AI agents run — Pitiful_Hedgehog_600 · 2026-09-11
- banteg's snail project crowdsources AI agents to finish matching Snail Mail's 20 remaining functions — banteg · 2026-09-11