xAI’s Grok Build CLI uploads entire repos and secrets by default
An independent analysis shows xAI’s official Grok Build CLI ships every file it can see—including .env secrets—to a Google Cloud Storage bucket, regardless of what the model actually reads. The tool also bundles the full git history of the repo, creating a massive, unredacted data dump by default.