secrets

A security analysis reveals that the Grok Build CLI tool uploads entire repositories, including full git history and .env secrets, to xAI's cloud, and the provided opt-out mechanism does not actually prevent this behavior.

SecretSpec 0.13 releases native SDKs for Python, Node.js/TypeScript, Go, Ruby, and Haskell, enabling applications to resolve secrets declared in secretspec.toml directly without relying on the CLI.