Grok CLI
A command-line interface tool introduced by xAI for interacting with Grok AI models, enabling developers to invoke AI capabilities within terminal environments to assist with code development.
Timeline (last 90 days)
dots can serve as an orchestration hub, installing and invoking external tools such as Grok CLI, Codex CLI, or Claude Code in the cloud to complete development and browser automation tasks
Grok CLI uploaded all files in the local directory to a Google Cloud Platform cloud storage bucket without the user's knowledge.
The files uploaded by Grok CLI included .env environment variable files containing sensitive credentials as well as the complete Git commit history.
The data uploaded by Grok CLI was not encrypted during transmission or storage.
A developer tool that by default uploads users' local files to the cloud is itself a high-risk design decision, violating the Secure by Default and Opt-in principles.
If Grok CLI has ever been used in an affected directory, all keys, passwords, and tokens in .env should be rotated immediately.
All Facts (6)
dots can serve as an orchestration hub, installing and invoking external tools such as Grok CLI, Codex CLI, or Claude Code in the cloud to complete development and browser automation tasks
50%UnverifiedThe data uploaded by Grok CLI was not encrypted during transmission or storage.
50%UnverifiedA developer tool that by default uploads users' local files to the cloud is itself a high-risk design decision, violating the Secure by Default and Opt-in principles.
50%UnverifiedIf Grok CLI has ever been used in an affected directory, all keys, passwords, and tokens in .env should be rotated immediately.
50%UnverifiedGrok CLI uploaded all files in the local directory to a Google Cloud Platform cloud storage bucket without the user's knowledge.
50%UnverifiedThe files uploaded by Grok CLI included .env environment variable files containing sensitive credentials as well as the complete Git commit history.
50%