Grok Build Exposed for Uploading Entire Codebases
charliermarsh · x · 2026-07-14
XBToshi pointed out that Grok Build has severe issues: during local use, it silently uploads entire repository data, Git commit history, and potentially sensitive files like .env.local and .dev.vars to the cloud.
According to the repost, tests showed that even without any tool-calls, about 12GB of repository data was sent to the cloud, with at least 5GB going to Google Cloud. The author described the behavior as "malware-like background code collection" and advised against using it for sensitive repositories.
More from coding & agent
- Musk hails Grok Bot as 'incredibly competent chief of staff' as user automates inbox triage — elonmusk · 2026-10-27
- shadcn's /improve skill paired with Grok on SuperGrok Heavy for plowing through issues — shadcn · 2026-10-27
- Paradigm Launches Envoys: Your Claude Code and Codex on Your Research Graph, Free — tensorqt · 2026-10-27
- AXL launches remote MCP server exposing 1,284 sales and marketing APIs to Claude and Codex — EdTech_Padre · 2026-10-27
- GitHub's Thomas Dohmke ships Entire, a Git forge built for agent-human collaboration — carrycooldude · 2026-10-27
- OmarchyTV hits GitHub: Omarchy-style TV launcher with AI TUI and MCP — alexcovo_eth · 2026-10-27