Grok Build Studio is an unofficial, third-party desktop client for the Grok Build CLI. It is not affiliated with, endorsed by, or maintained by xAI.

1. No WebView shell — the frontend never receives general shell spawn permissions.
2. Rust owns process lifecycle — only the backend starts grok agent stdio and related processes.
3. Authentication is delegated — the app does not read, display, or redistribute Grok auth tokens.
4. Ask by default — high-risk tool calls require explicit user approval; GUI risk hints never override Grok policy.
5. Path containment — filesystem and worktree operations are validated with canonical paths.
6. Redacted diagnostics — logs and diagnostic bundles must not include tokens, Authorization headers, or secret env values.
7. Strict CSP — production CSP allows only local application resources.

Please open a private security report (or GitHub Security Advisory if available) rather than a public issue. Include: OS, app version, Grok CLI version, reproduction steps, and impact.

Do not include live credentials or production secrets in reports.