Study: xAI's Grok Build CLI Allegedly Uploads Full Git History
10/16/2026 — 10/16, 06:23·1 sources (all)·1 reports (all)
Key takeaways
- Researcher cereblab used mitmproxy to capture xAI's terminal coding agent Grok Build CLI 0.2.93 uploading a full repository git bundle to an…
Background & analysis
On October 16, 2026, DEV Community published a report describing an investigation into Grok Build CLI 0.2.93, xAI's terminal coding agent. According to the report, a researcher publishing under the name cereblab used mitmproxy to inspect the CLI's network traffic. In the test, the only prompt sent to the agent asked it to reply with exactly "OK" and not to read or open any files. The model answered as instructed, but the CLI still uploaded a git bundle of the entire repository to an xAI storage endpoint in the background. That bundle covered 4 commits and 47 files.
The report also describes a second test, run against a repository of roughly 12 GB. In that case, about 5.10 GiB of data was uploaded in 73 chunks. The report states that xAI turned off the upload behavior on July 13 through a server-side switch.
No other details are available from the material. It does not explain why the CLI performed the uploads, what consequences they may have had, or whether xAI has commented beyond the server-side switch. The account rests on this single report and the packet-capture results it cites.
AI-generated from 1 reports · updated 2 hours ago
Latest turnA researcher publishing as cereblab used mitmproxy to capture Grok Build CLI 0.2.93, xAI's terminal coding agent, posting a full repository git bundle to an xAI storage endpoint after a prompt that only asked it to reply "OK". A second run sent roughly 5.10 GiB in 73 chunks from a 12 GB repo the agent never read. xAI switched the upload off server-side on July 13.
Related AI tools
- Heat index
- 88
- All sources
- 1
- All reports
- 1
- First seen
- 5 hours ago
Reports on this story headlines open the original
A researcher publishing as cereblab used mitmproxy to capture Grok Build CLI 0.2.93, xAI's terminal coding agent, posting a full repository git bundle to an xAI storage endpoint after a prompt that only asked it to reply "OK". A second run sent roughly 5.10 GiB in 73 chunks from a 12 GB repo the agent never read. xAI switched the upload off server-side on July 13.
DEV Community · AIAI score 69
Other stories people are talking about
- Heat index 95xAI launches Grok Voice 3.0 speech-to-speech model2 sources
- Heat index 25Grok 4.7 arrives on Amazon Bedrock with a tutorial on building tool-calling agents1 sources
- Heat index 2032SurgeMeta open-sources Muse Spark Open and partners with Apple for local runs25 sources
- Heat index 1149RisingAnthropic IPO Valuation Talk Drops to About $1.5 Trillion17 sources
- Heat index 934RisingNvidia's Nemotron 3.5 Family Lands on Ollama and Baseten12 sources
How is heat calculated?About the methodHide
Heat counts how many independent sources covered a story in the last 48 hours: one source counts once no matter how many posts it published, decaying with a 24-hour half-life. What ranks first is what many people are talking about.
This page aggregates public feeds. Headlines and summaries are machine-organized and remain the property of the original authors; verify important facts at the source. If you believe a headline or summary infringes your rights, email the contact address in the footer with the page URL and basis of your claim, and we will remove or replace it after review.
- Surge
- Discussion rising fast
- New
- First report within 6 hours
- Rising
- Still gathering discussion