An analysis of Grok Build CLI version 0.2.93 reveals that it uploads the entire repository, including full git history and sensitive environment files like .env, to xAI's cloud infrastructure. This data transmission occurs regardless of which files are actively opened or whether the "Improve the model" setting is disabled.
- The tool sends a complete git bundle containing all commit history to xAI's Google Cloud.
- Files such as .env containing API keys and database passwords are sent verbatim to cli-chat-proxy.grok.com.
- Disabling the "Improve the model" toggle does not prevent these uploads, as that setting only controls training usage.
The findings indicate that users cannot opt out of data collection by turning off model improvement settings, raising significant privacy concerns regarding secret exposure.