Grok Build uploaded full codebases — is your IP safe?
spacexai's grok build tool uploaded entire codebases to google cloud before being disabled. researchers confirmed the tool ignored user restrictions and captured secrets.
spacexai disabled its grok build coding assistant after cereblab researchers found it uploaded entire code repositories to google cloud storage. the tool captured more data than competitors like claude code, including files users explicitly excluded and deleted secrets. while musk stated all data would be deleted and privacy respected, the incident highlights risks of proprietary code and credentials being sent to external servers. cereblab noted that a '/privacy' command existed but failed to stop the uploads, exposing a significant gap in data governance.