A security researcher discovered that xAI's AI coding assistant Grok Build version 0.2.93 uploaded entire Git repositories, including unaccessed files and full commit history, when asked to analyze or debug code. The findings, published by researcher Cereblab on July 12th, showed that in one test, Grok Build transferred at least 5.1GB from an 11.2GB repository before logging was stopped, even though only about 192KB was needed for the AI task. Disabling Grok's "use for improving the model" setting did not stop the uploads. For comparison, the researcher wire-captured Claude Code, Codex, and Gemini and found that all three stayed local, only sending files they actually opened. Cereblab warned any developers who had used Grok Build to immediately rotate API keys, access tokens, or database passwords that may have been stored in their repositories. Hours after the findings gained traction online, xAI introduced a new /privacy command for Grok.