Grok Build Reported for Uploading Entire Repositories
TheZachMueller · x · 2026-07-14
Reports indicate that xAI's Grok Build CLI uploads entire Git repositories—including private codebases and unmasked secrets—to a Google Cloud bucket.
Key findings:
- On a 12GB test repository, the tool uploaded about 5.1GB of data to the grok-code-session-traces bucket, while the actual coding task only required 192KB.
- It scrapes the entire repository in the working directory rather than just the files needed for the task.
- A hidden toggle disablecodebaseupload: true appeared a day later, but the previous "Improve the model" opt-out did not prevent the upload.
- xAI has yet to clarify the scope, retention period, and deletion methods for the data.
More from coding & agent
- He benchmarks new models by having them build their own copilot — $28 of compute — bucolucas · 2026-10-27
- Founder generates 46 app promo videos in 4 days with Claude, skipping $11,500 in UGC fees — PrajwalTomar_ · 2026-10-27
- Should agents be allowed to change plans mid-task? Reddit debates the drift boundary — wistfulcracker84 · 2026-10-27
- HeyGen + Canva MCP turns slide speaker notes into an avatar presentation video — HeyGen · 2026-10-27
- Local beats cloud: Qwen 3.8 FN handles private student data as well as frontier models — dr_lm · 2026-10-27
- Cloudflare Computer adds agent interruption recovery and approval pauses in v0.7.0 — irvinebroque · 2026-10-27