Last week, security researcher @Cereblab exposed a troubling behavior in Grok Build. The tool silently transmitted developers' entire local repositories to cloud storage without explicit authorization. Under normal circumstances, a coding assistant should only send the code snippets required for a given task. Instead, Grok Build uploaded complete repositories. Moreover, the destination was not the model itself but Google GCP storage buckets.