Not only is Grok shit, they’re also incompetent

Security researchers at Cereblab discovered that Grok Build, an AI coding tool from Elon Musk's xAI, transmits entire repository contents—including sensitive files—unredacted to a Google Cloud Storage bucket used by SpaceXAI, rather than only the files needed to answer a user's prompt. The finding raises serious privacy and security concerns for developers using the tool.

Cereblab found that when Grok Build reads or processes a file, the contents of that file are transmitted without redaction to a Google Cloud Storage bucket used by SpaceXAI. Further, they claimed that Grok Build packages entire repos and uploads them as Git bundles, instead of just uploading the files required to answer a user’s prompt. https://www.theregister.com/ai-and-ml/2026/07/14/musk-promises-purge-after-grok-build-caught-sending-entire-repos-to-the-cloud/5271123 https://www.theregister.com/ai-and-ml/2026/07/14/musk-promises-purge-after-grok-build-caught-sending-entire-repos-to-the-cloud/5271123 So if the CSAM wasn’t enough maybe the baseline incompetence is enough to convince you not to use it.