SpaceXAI Grok Build Uploading Users Code Base to Google Cloud - Vibe Coded Crap
Source: YouTube · Eli the Computer Guy · published Jul 17, 2026 · 16:00
Grok Build, xAI's AI coding agent, was caught silently uploading users' entire code repositories—including SSH keys, API secrets, and deleted Git history—to Google Cloud, exposing serious security flaws 0:00.
Key Takeaways:
• Grok Build uploaded entire repos as Git bundles rather than just required files, transmitting secrets without redaction to a Google Cloud bucket 3:01
• Even when told to reply "okay" without opening files, the tool uploaded the full repo including secrets deleted months prior 6:31
• Competitors like Claude Code and Codex open only individual files, making Grok Build's behavior an outlier 5:09
• Musk acknowledged the issue and promised all uploaded data would be deleted after a server-side fix 4:00
• AI tools are being forced on developers under threat of termination, leaving no room to evaluate security ramifications 13:40
If this is the quality of AI tools where users have visibility, the hidden backend processes should raise serious concern for any organization.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Coming from the register, Musk promises purge after Grok build caught sending entire repos to the cloud. Because because that's what you get when you use AI tools in the modern world, right? You sit there, you install the AI tool, you think it's going to allow you to be able to ship products faster, when in reality it just causes a security nightmare, a disaster. I think it's funny, not that long ago, I do believe it was one of the leaders in Anthropic was talking about how much of Anthropic's code is now written by artificial intelligence. You'd be surprised to know that 60 or 70% of their their code is written by AI. And I have to say, as as days go by, I am ever less surprised that this crap is being created by artificial intelligence because it is just so weirdly weirdly shockingly bad…