xAI has open-sourced Grok Build after backlash over secretly uploading users’ repositories

xAI has released the full source code of Grok Build, its AI coding agent, after Cereblab researchers found that the tool was uploading users’ entire Git repositories to company controlled Google Cloud storage. The transferred data could include sensitive files such as SSH keys, password databases, private documents, and photos.

xAI disabled the file upload feature and said data storage had been turned off by default since July 12. Elon Musk also stated that previously uploaded user data would be permanently deleted and promised to open source the project after a security audit. The code is now available on GitHub under the Apache 2.0 license, although it was published as a single commit without previous Git history or pull requests.

The codebase contains approximately 844,530 lines of Rust covering Grok Build’s core agent workflow, tools, terminal interface, and plugin system. Code related to the disabled upload feature remains in the repository. Grok Build can read repository configurations, plan tasks, generate or modify code, execute shell commands, run in automated pipelines, and integrate with editors through the Agent Client Protocol.