--- title: xAI Open-Sources Grok Build Coding Agent After Cloud... description: xAI open-sourced Grok Build, its terminal-based AI coding agent, under Apache 2.0 license — three days after a security researcher revealed the tool was... canonical: https://daily.dev/posts/xai-open-sources-grok-build-coding-agent-after-cloud-upload-exposes-ssh-keys-repos-kbp9ooiq8 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: xAI Open-Sources Grok Build Coding Agent After Cloud Upload Exposes SSH Keys, Repos | daily.dev og:description: xAI open-sourced Grok Build, its terminal-based AI coding agent, under Apache 2.0 license — three days after a security researcher revealed the tool was... og:url: https://daily.dev/posts/xai-open-sources-grok-build-coding-agent-after-cloud-upload-exposes-ssh-keys-repos-kbp9ooiq8 og:image: https://api.daily.dev/og/posts/KbP9oOIq8.png og:image:alt: xAI Open-Sources Grok Build Coding Agent After Cloud Upload Exposes SSH Keys, Repos og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # xAI Open-Sources Grok Build Coding Agent After Cloud Upload Exposes SSH Keys, Repos **[DevOps.com](https://daily.dev/sources/devops)** · 5 min read · 0 upvotes · 0 comments ## Summary xAI open-sourced Grok Build, its terminal-based AI coding agent, under Apache 2.0 license — three days after a security researcher revealed the tool was silently uploading entire developer repositories, including SSH keys, .env files, and password databases, to an xAI-controlled Google Cloud bucket. The undocumented uploads sent up to 27,800x more data than the coding task required, and xAI's own 'Improve the model' privacy toggle had no effect on the behavior. xAI shut down the upload server-side on July 13 without a public advisory, and Elon Musk claimed all collected data would be deleted. The open-source release provides code transparency but does not accept external contributions. Security experts recommend treating any AI coding agent with file-system access like a privileged service: auditing network traffic, restricting permissions, and rotating any credentials that may have been exposed before July 13. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Medium](https://daily.dev/posts/medium-dhelurz55) · Medium · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/xai-open-sources-grok-build-coding-agent-after-cloud-upload-exposes-ssh-keys-repos-kbp9ooiq8) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"xAI Open-Sources Grok Build Coding Agent After Cloud Upload Exposes SSH Keys, Repos","url":"https://daily.dev/posts/xai-open-sources-grok-build-coding-agent-after-cloud-upload-exposes-ssh-keys-repos-kbp9ooiq8","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/xai-open-sources-grok-build-coding-agent-after-cloud-upload-exposes-ssh-keys-repos-kbp9ooiq8"},"datePublished":"2026-07-20T08:35:21.074Z","dateModified":"2026-07-20T08:36:25.677Z","description":"xAI open-sourced Grok Build, its terminal-based AI coding agent, under Apache 2.0 license — three days after a security researcher revealed the tool was...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/040a9e7bf061dc6c53b500044aa24b0c?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/040a9e7bf061dc6c53b500044aa24b0c?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"DevOps.com","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"DevOps.com","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/db8f2265cff0416c878c6e7e92bb8715","url":"https://daily.dev/sources/devops"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/xai-open-sources-grok-build-coding-agent-after-cloud-upload-exposes-ssh-keys-repos-kbp9ooiq8","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"DevOps.com","item":"https://daily.dev/sources/devops"},{"@type":"ListItem","position":3,"name":"xAI Open-Sources Grok Build Coding Agent After Cloud Upload Exposes SSH Keys, Repos"}]} ```