ZCode, a GLM-based coding agent, has been found to silently upload users' Git history to remote servers without explicit consent or notification. This behavior raises privacy concerns as it exposes potentially sensitive code and commit metadata.