On September 18, tech blogger ferstar released a reverse analysis of Zhipu ZCode, finding that once users log in, ZCode packages and encrypts the entire working project along with the full modification history in the background and uploads it to the cloud server, with no truly available off switch on the software interface and the decryption key stored only on Zhipu's side. Zhipu apologized, stating the problem stemmed from a feature enabled by default, that data would be destroyed immediately after use, and promised to open-source the code repository and introduce third-party review in the near future. The article notes similar issues: independent security researcher cereblon proved through packet capture analysis that xAI's programming Agent tool Grok Build would package and upload the user's entire project to Google Cloud Storage, including files the user explicitly told the AI not to read and passwords that had not been desensitized; earlier, Claude Code was found to transmit location and identity information back without the user's knowledge, and Anthropic engineers confirmed afterwards it was a deliberate experiment. None of these problems were discovered due to supervision or security audits, but often by individuals in the community, and no security frameworks built for Agents in the industry have rules to restrict manufacturers' own behaviors. When checking the local directory of ZCode on September 18, ferstar noticed abnormal hard disk space usage and found an encrypted file of about 313MB, whose attached file list showed about 42,000 files,