Grok Build Called Out for Uploading Home Directory
ctjlewis · x · 2026-07-15
Users reported that opening Grok Build directly in the local home directory uploads the entire directory, potentially including ssh keys, claude configurations, documents, and media files.
The real takeaway isn't just a funny mishap, but a genuine security warning for coding/Agent tools: without proper boundaries for the default working directory and upload scope, sensitive local files can easily be swept into the context or sent outward.
More from coding & agent
- agents-best-practices: a provider-neutral Agent Skill for designing and auditing agentic harnesses — tom_doerr · 2026-09-11
- Cognition's SWE-2 uses a KKT duality argument in RL to shift the effort Pareto curve — YouJiacheng · 2026-09-11
- First-ever Three.js Conference lands in Paris, with a panel on AI-shortened design workflows — OdinLovis · 2026-09-11
- Data engineering, not agent frameworks, is the real bottleneck for enterprise AI agents — dhruv2038 · 2026-09-11
- RTK Terminal Compression Cuts Tokens but Leaves Your AI Coding Bill Unchanged — Bartaseth · 2026-09-11
- GPT-6 Astra beats Factorio with enemies in 44 in-game hours at ~$4,500 API cost — liminal_bardo · 2026-09-11