Grok Build CLI Caught Uploading Entire User Repositories to Cloud
Independent researchers discovered that Grok Build CLI uploads entire user git repositories to Google Cloud, raising concerns about data privacy.
Grok Build CLI Caught Uploading Entire User Repositories to Cloud
Independent researchers passed the system through a proxy interceptor and found that the client packages the entire tracked git repository along with the full commit history and uploads it to a Google Cloud Storage bucket named grok-code-session-traces.
This occurs regardless of which files the agent actually opened during its operation. For instance, on one of the test repositories with a size of 12 GB, the model request channel transmitted about 192 KB of traffic (which directly relates to the task), while the upload channel to storage transmitted approximately 5.1 GB. Files that the agent is explicitly forbidden to open also end up in the cloud.
SpaceXAI's response came only a few days later. They stated that they are "deeply concerned about user privacy" and that code and execution logs are never retained for accounts with Zero Data Retention enabled, while others were urged to use the /privacy command.
Musk separately stated that SpaceXAI will completely delete all previously uploaded data as a precaution. However, xAI has yet to explain why uploading the entire repository is the default setting.
Why it matters
AnalysisThis situation highlights the importance of data privacy in modern technology. Data leaks can have serious consequences for users, making it crucial for companies to adhere to high security standards.
Discuss in community
Share your questions and insights with developers
Related in Ecosystem
Practical guides, core terminology, and agent skills
How to Build a Custom Design System in Claude Design: From Moodboard to Animated Mascot
Complete practical guide to building a brand design system in Claude Design: visual references, 4 diverging concepts, tokenization, stress-testing, and animated SVG mascot design.
Vibe Coding for Non-Developers: How Marketers, Designers, and PMs Build Products with Claude and Cursor
A practical guide to Vibe Coding without the terminal: 45 techniques for working in Claude and Cursor tailored for marketers, designers, and PMs. From website edits to routine automation.
Synthetic Users Testing
A methodology for product testing and UX/UI research using virtual agents with diverse predefined characteristics and goals. It enables the simulation of thousands of customer interactions with a new website in minutes, identifying awkward buttons, unclear texts, and sales funnel failures.
Hetzner Bare-Metal vs Cloud Hyperscalers
A financial and technical analysis of infrastructure costs: why renting dedicated hardware in European data centers (Hetzner, OVH) is 5–10 times cheaper than AWS/GCP virtual machines for AI workloads.