Grok’s Build CLI does not limit itself to the files the agent opens. Independent researcher cereblab found it sending entire codebases, version histories, and secrets to Google Cloud Storage.
In one case, 5.1 GiB moved in the background, nearly 28,000 times more data than the task actually required. And disabling the “improve the model” toggle only decides whether your data feeds training. It does not decide whether your source code leaves the machine.
Nevo Poran, Tenet’s co-founder and CTO, breaks down the wire-level analysis, what actually left the machine, and what to do about it. Any coding agent with git access carries the same risk.
Inside the recording:
- The wire-level analysis: 5.1 GiB in the background, nearly 28,000 times more data than the task required
- How coding agents with git access expose full repositories and history
- What to rotate now, and why “deleted” secrets still expose you
- Defenses for agents with broad repo access
Presenter
Nevo Poran, Co-Founder & CTO, Tenet Security. DEFCON speaker.
