What xAI Grok Build CLI Actually Sends to xAI: A Wire-Level Analysis
Summary
A GitHub Gist analyzes xAI's Grok Build CLI and finds that it transmits unredacted file contents (including secrets in .env files) to xAI and uploads the entire repository as a git bundle to Google Cloud Storage. The findings describe a two-channel data flow: model-turn payloads containing local file data and a separate storage upload preserving a full workspace snapshot, raising privacy and data-leak concerns. The analysis also notes telemetry and the lack of clear documentation in CLI materials about these behaviors.