xAI's Grok Build CLI caught uploading entire codebases without consent
The Neuron ● Covered by 3 sources
xAI's Grok Build CLI uploaded entire code repositories, including unread files and secrets, to Google Cloud Storage without explicit user consent. Testing on a 12 GB repository showed approximately 5.1 gigabytes transmitted via the /v1/storage endpoint with zero failures, while the model itself only received 192 kilobytes of content—a 27,800-fold ratio proving bulk repository upload rather than selective file transmission. xAI disabled the upload server-side, added an ineffective privacy opt-out, and Elon Musk publicly committed to deleting previously-uploaded data, though deletion completion remains unconfirmed.
Why it matters
Network analysis revealed xAI's Grok Build CLI uploads full codebases, commit histories, and .env files to Google Cloud buckets regardless of privacy settings, with a 12GB test repo uploading 5.1GB of data while the actual AI conversation used only 192KB.
