Grok Build Called Out for Uploading Home Directory
ctjlewis · x · 2026-07-15
Users reported that opening Grok Build directly in the local home directory uploads the entire directory, potentially including ssh keys, claude configurations, documents, and media files.
The real takeaway isn't just a funny mishap, but a genuine security warning for coding/Agent tools: without proper boundaries for the default working directory and upload scope, sensitive local files can easily be swept into the context or sent outward.
More from coding & agent
- Coding agents are heading toward an AI-writes, AI-reviews, human-approves workflow — aftahi_ai · 2026-07-22
- oMLX 0.5.2 adds Mac menu-bar stats, low-bit decode kernels, and faster downloads — awnihannun · 2026-07-22
- GitHub review bot hits its PR limit and forces a 39-minute cooldown — DanielLockyer · 2026-07-22
- Max reasoning effort appears to be mobile-only in Codex Remote, not desktop — GabGarrett · 2026-07-22
- A Reddit demo argues online stores should expose carts and pricing through MCP — gelembjuk · 2026-07-22
- Open-source AI SDK provider routes Vercel apps through a local Codex subscription — lgrammel · 2026-07-22