@fankaishuoai: Zcode pulled a massive one—fully packaged and uploaded the user's entire project directory, including the .git director…
Summary
An incident where the Zcode AI agent uploaded a user's entire project directory, including .git, raising privacy concerns. The author criticizes closed-source agents and recommends open-source alternatives.
View Cached Full Text
Cached at: 09/19/26, 08:57 AM
Zcode pulled a massive one—fully packaged and uploaded the user’s entire project directory, including the .git directory. What did I say? Agent software must use open-source ones, like: Pi Agent, Codex CLI, DeepSeek Harness. Closed-source Agents, Claude Code, Zcode—uninstall them immediately. Models with this kind of integrity will 100% use your user data for training. Stay away from trash model companies.
范凯说AI (@fankaishuoai): 我把 Claude Code 卸了。不是因为它不好用，是因为看完那份 154 页的报告之后，我意识到自己对本地 Agent 到底在采集什么、上报什么，几乎一无所知。证据和边界我都摆在片子里了。
Similar Articles
Inside ZCode: Silently uploading your Git history to the cloud
An investigation reveals that ZCode, Zhipu's AI coding desktop app, silently uploads users' entire Git workspace history to Aliyun OSS, encrypted with server-controlled keys, raising significant privacy concerns.
ZCode was allegedly caught uploading workspace/.git records to the cloud.
ZCode is allegedly accused of silently uploading workspace .git records to the cloud, raising privacy and security concerns for developers.
ZCode, the GLM coding agent, silently uploads your Git history
ZCode, a GLM-based coding agent, silently uploads users' Git history, raising concerns about privacy and security in AI development tools.
Grok uploaded my user directory to xAI's servers
A user claims that Grok, an AI model from xAI, uploaded their entire user directory containing SSH keys, password database, documents, and media to xAI's servers, raising serious privacy concerns.
@TheAhmadOsman: "xAI's Grok Build CLI was uploading entire Git repositories to a Google Cloud bucket" Yet another reason to move to Ope…
xAI's Grok Build CLI was found to be uploading entire Git repositories to a Google Cloud bucket, including private code and secrets, without proper disclosure or acknowledgment.