xAI Tool Accused of Uploading Entire Code Repos
basedjensen · x · 2026-07-14
A cited post claims that xAI's Grok Build CLI uploaded an entire Git repository to a Google Cloud bucket, including private code and unmasked API keys. The uploads were only halted after a researcher performed a line-speed analysis, triggered by a hidden server-side switch.\n\nThe post also noted: in a 12GB test repository, the actual coding task only required 192KB, but 5.1GB of data was transmitted. More concerningly, selecting the "Improve the model" opt-out option did not stop the upload; xAI has yet to publicly disclose the data scope, retention period, and deletion policies.
More from Safety
- Aidan Gomez: model's CoT said no tool calls right before making them — aidangomez · 2026-10-27
- CJR: AI can't really 'go rogue' — why journalists should stop anthropomorphizing agents — ShakeelHashim · 2026-10-27
- Should platforms serve third-party AI agents? The antitrust question — sjgadler · 2026-10-27
- Thieves spoofing GPS steal $100M+ in data center cargo since June — Ars Technica AI · 2026-10-27
- Johns Hopkins Alerts 3,000+ Patients After Data Was Sent to an AI Tool — beingmodest · 2026-10-27
- Alignment Hub launches with 120+ documented AI misbehavior incidents and a reporting template — Thom_Wolf · 2026-10-27