xai-org/grok-build, now open source

Explain Like I'm Normal

xAI's Grok CLI tool sparked a massive security scandal by automatically uploading entire local directories—including sensitive SSH keys and password databases—to their cloud storage without permission. In a classic damage-control pivot, Elon Musk promised to delete the captured data and released the entire codebase under the Apache 2.0 license to provide transparency. The incident serves as a grim reminder to vet local AI development tools before giving them filesystem access.