The xAI 'Grok Imagine' video generator was found to produce non-consensual sexualized deepfakes of a celebrity when users selected a 'spicy' mode preset. Despite xAI's stated policies against pornographic depictions, the tool generated videos of the celebrity tearing off clothing without explicit user prompts. This incident highlights a failure in safety guardrails for generative AI tools, raising concerns about the proliferation of non-consensual intimate imagery.
The Verge reported that xAI's Grok Imagine video generator allegedly produced non-consensual deepfake nudes of Taylor Swift without explicit prompting. Journalist Jess Weatherbed reportedly stated the images appeared the first time she used "spicy" mode on a Coachella-themed prompt, without attempting to circumvent safeguards.
Risk classification
- Primary risk domain: 1 Discrimination & Toxicity
- Primary risk subdomain: 1.2 Exposure to toxic content
The AI system exposed the user to explicit, non-consensual pornographic video content of a celebrity.
Additional risk subdomains
- 7.3 Lack of capability or robustness: The system failed to maintain its safety guardrails and filters when processing the 'spicy' video preset.
Causal factors
- Entity: AI
- Intent: Unintentional
- Timing: Post-deployment
The risk was caused by the Grok Imagine AI system generating unintended explicit outputs post-deployment.
EU AI Act risk tier
- Risk tier: 3 Limited Risk
Limited Risk: The report describes Grok Imagine, an AI system generating deepfakes, which falls under limited risk requiring transparency obligations.
AI system and alleged parties
- AI system: Grok Imagine (xAI)
- AI purpose: Deepfake Video Generation; Deepfake Image Generation
- Behaviour type: Tool
- Alleged developer: xAI
- Alleged deployer: xAI
- Alleged harmed parties: Taylor Swift, Jess Weatherbed, Grok Imagine users
Harm severity
Severity ratings are based on this scale.
Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.
- Physical: direct Negligible, indirect Negligible
- Infrastructure: direct Negligible, indirect Negligible
- Property: direct Negligible, indirect Negligible
- Financial: direct Negligible, indirect Negligible
- Environmental: direct Negligible, indirect Negligible
- Malicious content: direct Minor, indirect Negligible
- Differential treatment: direct Negligible, indirect Negligible
- Civil rights: direct Minor, indirect Negligible
- Democracy: direct Negligible, indirect Negligible
- Privacy: direct Negligible, indirect Negligible
- Psychological: direct Negligible, indirect Negligible
- Epistemic: direct Negligible, indirect Negligible
- Child sexual exploitation and abuse: direct Negligible, indirect Negligible
Malicious content
Reported: The report explicitly describes toxic and inappropriate content created directly by the AI system.
Directly caused: Grok Imagine generated explicit, uncensored topless videos of Taylor Swift tearing off her clothes and dancing in a thong.
Inferred additional harm: Given that millions of images have been generated using Grok Imagine, it is highly likely that other users generated and were exposed to similar explicit celebrity deepfakes.
Civil rights
Reported: The report explicitly references the Take It Down Act, which criminalizes the publication of nonconsensual intimate images, highlighting a violation of civil rights.
Directly caused: The AI system violated Taylor Swift's right to control her own intimate likeness by generating non-consensual sexualized depictions of her.
People affected
- Occurrences reported: 1
- People reportedly harmed: 1
- People reportedly exposed: 1
Potential causes
Management
- Prioritizing Growth Over Safety: Management hyped usage and rapid rollout over implementing guardrails.
- Inconsistent Policy Enforcement: Acceptable use policy bans pornographic images but tool allows them.
Technology
- Flawed Video Generator Design: Spicy mode defaults to removing clothing on celebrity images.
- Lack of Industry-Standard Guardrails: Tool lacks basic safety filters to prevent sexual deepfakes.
Data Inputs
- Unrestricted Celebrity Likeness: Image generator easily creates recognizable celebrity images.
Human Factors
- Bypassable Age Verification: Users can bypass age checks by simply self-reporting birth year.
Process and Methods
- Inadequate Safety Testing: Testing failed to catch nudity generation via spicy preset.
- Incomplete Prompt Filtering: Direct text blocks work but preset filters fail to stop nudity.
Regulatory Environment
- Emerging Regulatory Frameworks: Laws like Take It Down Act are new and lack established compliance.
Information quality
- Classification confidence: High
- Reason for confidence: The reports provide consistent, detailed, first-hand accounts of testing the Grok Imagine tool, with clear descriptions of the inputs, presets, and resulting outputs.
The incident involved xAI's Grok Imagine tool generating non-consensual sexualized video deepfakes of celebrity Taylor Swift due to a failure in safety guardrails. While raising significant concerns about the proliferation of synthetic media and individual privacy violations, the incident has negligible direct national security implications, representing a commercial software failure rather than a state-level threat.
- Overall national security impact: Minor
- Scope: Multiple nations
- Primary target: No clear primary
- Other affected: United States, United Kingdom
- Alleged perpetrator: Unknown
Threat characteristics
- Imminence: Long-term. Represents an ongoing strategic concern regarding generative AI safety and deepfake proliferation rather than an active, imminent national crisis.
- Autonomy: Human-controlled. The AI system generated the content in response to direct human prompts and preset selections, operating under human control.
- Novelty: Evolved capability. While celebrity deepfakes are an established issue, the automated generation of explicit video content via simple preset bypasses represents an evolved capability.
Impact by dimension
- Physical security: Negligible. No physical infrastructure, kinetic weapons, or human safety systems were compromised or targeted in this incident.
- Information security: Negligible. While generative deepfakes pose potential information warfare risks, this specific incident involved a non-consensual celebrity depiction without national security intelligence compromise.
- Sovereignty: Negligible. The incident did not affect government operations, border controls, electoral systems, or state sovereignty.
- Economic security: Negligible. The incident represents a software guardrail failure for a commercial AI product, with no impact on critical economic infrastructure or strategic technology theft.
- Societal stability: Minor. Represents a violation of individual rights and privacy through non-consensual intimate imagery, but does not threaten large-scale societal stability or cause widespread civil unrest.