2026-07-13 / Signal #1
xAI Grok Build CLI secretly uploads entire codebases, git history, and.env secrets (unencrypted).
“Your helpful Grok coding buddy has been shipping your.env and whole repo to xAI every run.”
Why It Matters
Builders excitedly adopting a "terminal coding agent" are feeding their full IP and secrets to xAI's cloud by design (opt-out doesn't block functional uploads); turns dev tools into always-on informants. Concrete real-world behavior at builder/xAI/institutions intersection.
Evidence
cereblab wire-level gist + packet captures (July 12); HN top post (~490 pts); multiple X posts referencing the analysis and xAI's defensive response admitting workspace/git bundle uploads.
Sources
Daily scan: 2026-07-13