A researcher proved Grok Build CLI sent full repos, 27,800x more data than the task needed, to a Google Cloud bucket. xAI had said no code was transmitted.