Grok CLI Risk Analysis: How a Single Prompt Can Send Sensitive Files to the Cloud

Background The analysis began after 23pds (Shan Ge), CISO of SlowMist, came across community discussions suggesting that Grok CLI might pose security risks. Opinions varied widely on what those risks were and how significant they might be. I (Thinking, Head of Business Security at SlowMist) happened to have the latest Grok CLI 0.2.98 macOS aarch64 binary (SHA-256: d5952131…), so I decided to investigate it myself. Rather than speculate, I disassembled the binary, captured its…