ZCode, the GLM coding agent, silently uploads your Git history

Two independent write-ups, one from tokenstead.ai and one from blog.ferstar.org, found that ZCode, a GLM-based coding agent, silently uploads a workspace's git history and file snapshots to remote servers without disclosing that behavior. The reports drew over 400 combined Hacker News points and dozens of comments before the pattern became widely known. The specific failure was scope: an agent that only needed to read files inside its working directory was instead sending git history and full workspace snapshots off the machine, a distinction any team evaluating a coding agent should check for directly rather than assume away. For teams already running ZCode against private repositories, the practical response is to inspect outbound network activity during a session rather than take an agent's stated file access at face value. The broader lesson extends past this one tool: as more coding agents gain shell and filesystem access, the gap between what an agent is supposed to touch and what it actually transmits is exactly the kind of thing that only shows up when someone bothers to watch the wire.