Wire analysis: xAI's Grok Build CLI uploads your .env and entire repo to xAI

What xAI's Grok Build CLI Actually Sends to xAI

A packet capture of Grok Build CLI (v0.2.93) shows it uploads the entire project repo to xAI's GCS bucket by default, including plaintext secrets in .env and full git history. Even with a prompt telling the model to reply 'OK' and read no files, the whole repo is still uploaded. On a 12 GB test repo, the storage upload hit 5.10 GiB—roughly 27,800× the model-turn channel data. Disabling 'Improve the model' does not stop the upload.

Why it matters: A wire-level analysis shows Grok Build CLI uploads the entire repo — including plaintext .env secrets and full git history — to xAI's GCS bucket by default, even when the prompt says 'don't read any files.' This is hard evidence on AI coding tool privacy, not speculation. Scor...