Grok Build CLI uploads your whole repo — full git history + .env secrets — to xAI's cloud, and the opt-out doesn't stop it (wire-captured) : LocalLLaMAjump to contentmy subreddits<br>edit subscriptions<br>popular<br>-all<br>-users<br>| AskReddit<br>-pics<br>-funny<br>-movies<br>-gaming<br>-worldnews<br>-news<br>-todayilearned<br>-nottheonion<br>-explainlikeimfive<br>-mildlyinteresting<br>-DIY<br>-videos<br>-OldSchoolCool<br>-TwoXChromosomes<br>-tifu<br>-Music<br>-books<br>-LifeProTips<br>-dataisbeautiful<br>-aww<br>-science<br>-space<br>-Showerthoughts<br>-askscience<br>-Jokes<br>-Art<br>-IAmA<br>-Futurology<br>-sports<br>-UpliftingNews<br>-food<br>-nosleep<br>-creepy<br>-history<br>-gifs<br>-InternetIsBeautiful<br>-GetMotivated<br>-gadgets<br>-announcements<br>-WritingPrompts<br>-philosophy<br>-Documentaries<br>-EarthPorn<br>-photoshopbattles<br>-listentothis<br>-blog

more "

reddit.com LocalLLaMAcomments

Want to join? Log in or sign up in seconds.

limit my search to r/LocalLLaMAuse the following search parameters to narrow your results:<br>subreddit:subredditfind submissions in "subreddit"author:usernamefind submissions by "username"site:example.comfind submissions from "example.com"url:textsearch for "text" in urlselftext:textsearch for "text" in self post contentsself:yes (or self:no)include (or exclude) self postsnsfw:yes (or nsfw:no)include (or exclude) results marked as NSFWe.g. subreddit:aww site:imgur.com dog<br>see the search faq for details.

advanced search: by author, subreddit...

this post was submitted on 11 Jul 2026<br>183 points (96% upvoted)<br>shortlink:

Submit a new link

Submit a new text post

LocalLLaMA<br>joinleave

r/LocalLLaMA

A subreddit to discuss about Llama, the family of large language models created by Meta AI.

Subreddit rules

Search by flair

+Discussion

+Tutorial | Guide

+New Model

+News

+Resources

+Other

a community for 3 years

MODERATORS

message the mods

45 &middot; 86 comments<br>Best Local VLMs - July 2026<br>&middot; 5 comments

I got Gemma 4 running directly inside Godot using only GDScript and Vulkan compute shaders<br>559 &middot; 109 comments

Apple sues OpenAI alleging trade secret theft, says scheme was 'at every level'<br>75 &middot; 60 comments

Compressed Version of Qwen-3.6-27B coming from PrismML - Khosla-Backed Startup Claims Breakthrough With Largest-Ever AI Model on an iPhone<br>744 &middot; 79 comments

Local Image to 3D (23 &middot; 5 comments

Experiment: autonomous NPCs powered by Gemma 4 E2B in the browser<br>30 &middot; 3 comments

Flash-MSA: Accelerating Million-Token Training With Sparse Attention Kernels<br>69 &middot; 32 comments<br>Why do people keep fine-tuning on summarized/censored SOTA CoT traces?<br>129 &middot; 14 comments

moondream3.1-9B-A2B<br>43 &middot; 20 comments<br>Running Qwen3.5-122B on Mac Studio 96GB: Fixed 3 bugs that made long-context inference usable

Welcome to Reddit,<br>the front page of the internet.<br>Become a Redditorand join one of thousands of communities.

&times;

182<br>183<br>184

Grok Build CLI uploads your whole repo — full git history + .env secrets — to xAI's cloud, and the opt-out doesn't stop it (wire-captured)Discussion (self.LocalLLaMA)<br>submitted 2 days ago * by TastyLeadership2757

I ran Grok Build CLI (v0.2.93) through mitmproxy. It uploads your entire repo as a git bundle (full history) to xAI's Google Cloud — independent of what you open. With the prompt literally "do not read or open any files," a file I planted came back verbatim when I git clone-d the captured upload. Separately, files it reads (incl. a .env with API_KEY/DB_PASSWORD) go to cli-chat-proxy.grok.com verbatim. Turning off "Improve the model" doesn't stop it — that toggle governs training, not upload.

Full method + evidence (SHA-256s, repro commands, the git bundle recovering a never-read canary file): https://gist.github.com/cereblab/dc9a40bc26120f4540e4e09b75ffb547

Update: I re-ran the same wire test on Claude Code, Codex and Gemini — all three stay local (they only send the files they open, no whole-repo bundle). Grok was the only one uploading everything. And after this went public, xAI quietly turned Grok's upload off server-side (disable_codebase_upload: true).

Reproduce it yourself (mitmproxy harness + downloadable evidence + the 4-tool comparison): https://github.com/cereblab/grok-build-exfil-repro

Me: https://x.com/cereblab

47 comments<br>share<br>save<br>hide<br>report

all 47 comments<br>sorted by: best<br>topnewcontroversialoldrandomq&alive (beta)

Want to add to the discussion?<br>Post a comment!<br>Create an account

[–]therealgoshi 76 points77 points78 points 1 day ago (0 children)<br>Gotta love how all the special people ignore the obvious data theft and blames OP for not sandboxing.<br>Which is a fair point, but you're fucked up in the head if your default is not to blame the thief but the owner for not having a high enough wall around the garden.

permalink<br>embed<br>save<br>report<br>reply

[–]TastyLeadership2757[S] 48 points49 points50 points 1 day ago (1 child)<br>I'm 100% human here reporting this one to you all, for free, after a long night investigated and validated it. My number 1 concern is they git bundle everything and uploaded to there...