Grok Build Called Out for Uploading Home Directory
ctjlewis · x · 2026-07-15
Users reported that opening Grok Build directly in the local home directory uploads the entire directory, potentially including ssh keys, claude configurations, documents, and media files.
The real takeaway isn't just a funny mishap, but a genuine security warning for coding/Agent tools: without proper boundaries for the default working directory and upload scope, sensitive local files can easily be swept into the context or sent outward.
More from coding & agent
- AXL launches remote MCP server exposing 1,284 sales and marketing APIs to Claude and Codex — EdTech_Padre · 2026-10-27
- OmarchyTV hits GitHub: Omarchy-style TV launcher with AI TUI and MCP — alexcovo_eth · 2026-10-27
- AWS on agent prompt caching: explicit + implicit patterns to slash token costs — AWS ML Blog · 2026-10-27
- Reddit Thread: Keeping AI Agents Grounded in Current Project Information — Few-Ad-1358 · 2026-10-27
- He gave his AI agent a phone number and email — then hired it as social media manager — heyshrutimishra · 2026-10-27
- Firecrawl launches Alexandria company-data API and announces $75M Series B — devdigest · 2026-10-27