Grok CLI Leaks .env Secrets via Cloud Uploads Every Turn

Grok CLI 0.2.98 uploads full git bundles—including .gitignore-excluded files like .env, .envrc, config.secret—to xAI cloud storage every turn, before inference requests. Disassembly, Frida, and mitmproxy verified this. Uploads occur regardless of "Improve the model" and can be forced server-side. Rediscovered six files, three gitignored, from captured traffic. SlowMist's Thinking investigates.