Grok Build CLI 0.2.93 Found to Upload Entire Git Repositories, Including Secrets and History

According to monitoring by Beating, security researchers captured network traffic from Grok Build CLI 0.2.93. The results show that this xAI programming agent uploads the entire Git repository to the cloud, including all Git-tracked files and the full commit history—not limited to the code actually accessed by the agent. Even when researchers instructed Grok to "not read any files," they were still able to reconstruct bait files that were never opened from the uploaded package. The same result was reproduced in a second repository. During a test with a 12GB repository, 5.5GB of data had already been uploaded before the process was halted. If Grok reads a .env file, API keys and database passwords contained within it are transmitted verbatim in model requests and session archives. Even after disabling "Improve the model," the full repository upload continues. xAI’s official documentation states only that prompts and file contents are sent for cloud inference, but does not disclose that the entire repository is additionally uploaded.