Grok Build Reportedly Uploads Entire Repositories
jedisct1 · x · 2026-07-14
xAI's Grok Build CLI has been found to upload entire Git repositories to a Google Cloud bucket, including private codebases and unmasked secrets.
Researchers highlighted that on a 12GB test repository, the tool uploaded 5.1GB of data, whereas the actual coding task only required 192KB. It scraped the entire repository in the working directory rather than just the files needed for the task.
xAI subsequently halted the uploads via a hidden server-side switch disablecodebaseupload: true, but as of the post's publication, they had yet to publicly clarify the scope of the data, retention periods, or whether the already uploaded content had been deleted.
More from coding & agent
- For OSS apps, proofs of concept — not PRs to one repo — may be the core primitive — dbreunig · 2026-10-27
- Hook everything into the Dot: a workaround to stretch ChatGPT subscription limits — teortaxesTex · 2026-10-27
- Jev launches people-search API for agents at $0.0089/lead, claiming 85% cheaper than Clay — alexcovo_eth · 2026-10-27
- Going through every compound engineering skill to decide where humans stay in the loop — kieranklaassen · 2026-10-27
- UCSB CS Prof. Xifeng Wang lands 3 grants worth $180K+ for practical agentic AI research — xwang_lk · 2026-10-27
- Gen games don't need to be realtime — turn-based interactivity works, devs argue — djcows · 2026-10-27