Grok Bot踩坑长帖约 5 分钟

Grok Build会整仓上传

Grok Build dumps whole repos

要点

  1. Grok Build 会把整仓打成 git bundle 上传,包括从未读过的文件
  2. .env.local 等密钥也会进模型,Improve the model 开关挡不住
  3. 敏感仓库先隔离环境,密钥写进 gitignore,跑完立刻轮换
  4. 现已可用 /privacy opt-out,还能删除此前同步出去的数据
  5. 官方承认这是为了 subagent 和 worktree,文档当时并未写清

原帖开头

the absolute state of ai dev tools. grok build is silently dumping 12gb of untouched repo data and full git commit histories to gcp just to autocomplete a script. they don't want to help you build, they are just treating local dev environments like an open buffet for training dat