Grok Build CLI uploads full Git repositories to xAI storage
Source headline: Grok Build Uploads Entire Git Repositories to xAI Storage, Not Just Files It Reads
Intelligence Summary
xAI’s Grok Build coding CLI reportedly uploads entire Git repositories, including full history, to an xAI-controlled Google Cloud Storage bucket. A researcher captured one such upload while testing Grok Build version 0.2.93. The captured request contained a git bundle that, when cloned, allowed access to repository contents beyond the specific files the agent appeared to need. This creates a data exposure risk if repositories contain secrets, sensitive code, or proprietary history. Users running Grok Build should review data handling expectations, restrict sensitive repository access, and consider using repositories with minimal sensitive content.
Recommended Action
Review affected assets, schedule urgent remediation, and monitor related indicators.
