Grok Build was uploading entire Git repositories to xAI’s cloud, including committed secrets

A security researcher found that xAI's Grok Build CLI was uploading entire Git repositories, including sensitive committed secrets and API keys, to a Google Cloud Storage bucket, contradicting the company's claims of no data transmission. Despite a privacy toggle meant to prevent this, data uploads continued until Elon Musk confirmed the issue and said user data would be deleted, though no independent audit has verified this. The incident raises concerns about Grok Build's privacy practices, as