Grok Build Exposes Code Upload Risks
Substantial_Step_351 · reddit · 2026-07-15
This discussion focuses on a security/privacy issue in Grok Build. According to an article by cereblab, the CLI uploads the entire git repository, including full history, to xAI's storage buckets.
Key Points from the Article
- In a roughly 12GB test repository, model-related traffic was only about 192KB, but the storage channel transmitted 5.1GB.
- It even uploaded a file explicitly instructed not to be opened.
- More concerningly, the fix wasn't a client update; the next day, the server-side simply flipped a switch: disablecodebaseupload true.
- This indicates the capability was remotely controllable all along, rendering local "privacy switches" unreliable.
Core Discussion Points
The post emphasizes that while people focus on prompt injection or model behavior, the real danger lies in the harness / tool layer:
- It has network access
- It can access your entire repository
- It might feature auto-update channels
- The actual risk might be higher than random npm packages
The author concludes by asking if anyone is performing egress filtering for coding agents or actually inspecting traffic payloads.
More from coding & agent
- Alex Townsend posts 200 open problems in numerical linear algebra for humans and AI agents — IgorCarron · 2026-09-11
- Kimi K2.8 Preview rolls out: near-K3 coding performance, 1M context for all tiers — teortaxesTex · 2026-09-11
- Looking for a classifier of software engineering task shapes to pick models per task — StewartalsopIII · 2026-09-11
- Steal this idea: prompt-to-hardware where agents assemble custom devices — paraschopra · 2026-09-11
- Model Is the Least Interesting Part: A Guide to Six Core AI Architectures from RAG to Multi-Agent — goyalshaliniuk · 2026-09-11
- Non-coder builds layered memory architecture: 20k tokens tracks a year of agent conversations — matteoianni · 2026-09-11