xAI 泄露 SSH 密钥并上传数据 — 却选择开源 Grok-Build 作为回应
在被发现该代理会将 SSH 密钥和密码等敏感文件上传至云端服务器后，xAI 发布了 Grok Build 的 84 万行 Rust 源代码。
Facing backlash for security risks, xAI has open-sourced its Grok Build agent on GitHub under the Apache 2.0 license after users discovered the terminal tool uploaded entire directories, including SSH keys and passwords, to Google Cloud. The 844,530-line Rust codebase, which includes the agent loop, tools, and terminal UI, now supports local-only execution and has the data upload feature disabled by default. This transparency effort allows developers to audit the code and run the agent locally, mitigating fears of data exfiltration. The incident highlights the security risks inherent in AI coding agents that require broad file system access.