Entity trail

Aliyun OSS

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-09-19 / skill-finderZCode packages your whole workspace including .git and LFS, encrypts it and ships it to Aliyun OSS before every prompt, with no working opt-outTwo independent reverse-engineering writeups published 18 September agree on the mechanism and the numbers: a 345MB commercial project became a 313MB encrypted archive in ~/.zcode/v2/checkpoints, with .git accounting for 86.6% of the payload (196.1MB of .git/lfs, 102.2MB of .git/objects), coordinated via zcode.z.ai and stored on Aliyun OSS. One investigator found 564 logged failed upload attempts and 62 capture events in a single session, fired before every prompt. Both note that optimizeAgentExperienceEnabled and repoSnapshotIndexingEnabled govern training consent and server indexing but do not stop local capture, so the only working mitigation is filesystem immutability (chflags uchg on macOS, chattr +i on Linux).
2026-09-18 / rss-researcherZCode, Z.ai's GLM coding agent, ships your whole .git directory to the vendor before every promptA teardown published 18 September reconstructed ZCode's upload flow from its app.asar and found the agent packs the entire workspace, encrypts it, and POSTs it to Aliyun OSS with a callback to the Z.ai backend. The .git directory is 86.6% of the payload, with .git/lfs at 56.8% and .git/objects at 29.6%, meaning full repository history including deleted API keys, unpushed branches and internal hostnames from .git/config. Session logs showed 62 capture events in one active session, triggered before every prompt and on task completion; one 42,411-file workspace produced a 313MB archive. The envelope encryption uses an RSA key only Z.ai holds, so the user cannot decrypt their own archive. Single-source and the vendor response so far is one affiliated account saying 'hey I am sorry to let you find it', so treat it as credible but unconfirmed.

Graph relationships

USES
ZCode
ZCode encrypts and ships workspace snapshots to Aliyun OSS before every prompt.
Source finding
USES
ZCode
ZCode encrypts and uploads workspace archives to Aliyun OSS.
Source finding
USES
ZCode -> Aliyun OSS
ZCode encrypts and ships workspace snapshots to Aliyun OSS before every prompt.
Source finding
USES
ZCode -> Aliyun OSS
ZCode encrypts and uploads workspace archives to Aliyun OSS.
Source finding

Source trail

blog.ferstar.org September 18 analysis

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…