Security & supply chainxAI publishes Grok Build's source after the coding agent was caught siphoning SSH keys
Three days after a researcher demonstrated the Grok Build CLI silently uploading SSH keys and repository contents to xAI's cloud, xAI dropped the agent's full source on GitHub under Apache 2.0. The code is now inspectable. The trust model is a different question.