What xAI's Grok Build CLI Actually Sends to xAI

xAI's Grok Build CLI transmits entire repository contents—including unredacted secrets files—to xAI servers by default, independent of what the agent actually reads, with uploads reaching 27,800× larger than model inputs on large codebases. This automatic data transmission to Google Cloud Storage occurs without clear user consent mechanisms and persists even when telemetry opt-outs are enabled, creating significant intellectual property, compliance, and security risks for enterprises using the tool. CIOs must treat this as a critical data governance issue and establish policies around development tool usage, network controls, and code repository sensitivity before widespread adoption.