Security researchers captured network traffic from Grok Build CLI version 0.2.93. The results show that this xAI programming agent uploads your entire current Git repository to the cloud — including all tracked files and the full commit history, not just the code it actually reads.
When researchers told Grok "don't read any files," they still recovered decoy files from the upload that were never opened by the agent. The same behavior was confirmed with a second repository. Testing with a 12GB repository, 5.5GB of data was successfully uploaded before the process was aborted.
If Grok reads your .env file, API keys and database passwords go straight into model requests and session archives. Even after disabling the "Improve the model" setting, the full repository upload continues.
xAI's official documentation only states that prompts and file contents are sent to the cloud for inference — there's no mention of uploading the entire repository.