Skip to content
r/LocalLLaMA

Grok Build CLI uploads your entire repo—full git history and .env secrets—to xAI's cloud, and the opt-out doesn't stop it

Grok Build CLI uploads your whole repo — full git history + .env secrets — to xAI's cloud, and the opt-out doesn't stop it (wire-captured)

A Reddit user captured network traffic showing that xAI's Grok Build CLI uploads the entire project repo to the cloud, including full git history and .env secrets. The opt-out setting does not stop the upload. The post body is inaccessible due to a Reddit block, so trigger conditions, affected versions, and xAI's response remain undisclosed.

Why it matters: A security/privacy incident with wire-capture evidence — high credibility and direct relevance to any dev considering Grok Build CLI. Score capped below 85 because the Reddit body is blocked, leaving trigger conditions, affected versions, and xAI's response unknown.

Read the original ↗Export Markdown