Grok Build Exposes Code Upload Risks
Substantial_Step_351 · reddit · 2026-07-15
This discussion focuses on a security/privacy issue in Grok Build. According to an article by cereblab, the CLI uploads the entire git repository, including full history, to xAI's storage buckets.
Key Points from the Article
- In a roughly 12GB test repository, model-related traffic was only about 192KB, but the storage channel transmitted 5.1GB.
- It even uploaded a file explicitly instructed not to be opened.
- More concerningly, the fix wasn't a client update; the next day, the server-side simply flipped a switch: disablecodebaseupload true.
- This indicates the capability was remotely controllable all along, rendering local "privacy switches" unreliable.
Core Discussion Points
The post emphasizes that while people focus on prompt injection or model behavior, the real danger lies in the harness / tool layer:
- It has network access
- It can access your entire repository
- It might feature auto-update channels
- The actual risk might be higher than random npm packages
The author concludes by asking if anyone is performing egress filtering for coding agents or actually inspecting traffic payloads.
More from coding & agent
- Devin adds e2b sandboxes for remote agent execution — badphilosopher · 2026-07-22
- Hermes Agent Refactoring Proposal: Decoupling via Event Bus and Monorepo Slicing — Promptmethus · 2026-07-22
- ty now reads Pydantic config keywords and field metadata — charliermarsh · 2026-07-22
- Pensar Launches AI Security Agent to Autonomously Discover and Patch 0-Days — andriy_mulyar · 2026-07-22
- ty adds first-class Pydantic support, including strict and lax field handling — charliermarsh · 2026-07-22
- Google launches Gemini 3.5 Flash Cyber for CodeMender, with limited access for governments — GoogleAI · 2026-07-22