Grok Build Exposed for Uploading Entire Codebases
charliermarsh · x · 2026-07-14
XBToshi pointed out that Grok Build has severe issues: during local use, it silently uploads entire repository data, Git commit history, and potentially sensitive files like .env.local and .dev.vars to the cloud.
According to the repost, tests showed that even without any tool-calls, about 12GB of repository data was sent to the cloud, with at least 5GB going to Google Cloud. The author described the behavior as "malware-like background code collection" and advised against using it for sensitive repositories.
More from coding & agent
- Coding agents are heading toward an AI-writes, AI-reviews, human-approves workflow — aftahi_ai · 2026-07-22
- oMLX 0.5.2 adds Mac menu-bar stats, low-bit decode kernels, and faster downloads — awnihannun · 2026-07-22
- GitHub review bot hits its PR limit and forces a 39-minute cooldown — DanielLockyer · 2026-07-22
- Max reasoning effort appears to be mobile-only in Codex Remote, not desktop — GabGarrett · 2026-07-22
- A Reddit demo argues online stores should expose carts and pricing through MCP — gelembjuk · 2026-07-22
- Open-source AI SDK provider routes Vercel apps through a local Codex subscription — lgrammel · 2026-07-22