Grok Build CLI 0.2.93 Found Uploading Entire Git Repositories, Including Secrets and Commit History

According to security researchers monitored by Beating, Grok Build CLI version 0.2.93 uploads entire Git repositories to the cloud, including all Git-tracked files and complete commit history, regardless of which files the Agent actually accessed. Researchers confirmed that even when instructed not to read any files, unaccessed decoy files were recovered from upload packages, with results replicated across multiple repositories. In testing a 12GB repository, 5.5GB of data was successfully uploaded before termination.

If Grok reads .env files, API keys and database passwords are included as-is in model requests and session archives. The upload continues even after disabling the "Improve the model" setting. xAI's official documentation states only prompts and file contents are sent to cloud inference, with no mention of complete repository uploads.