The 'Code Repository Indexing' feature, enabled by default in ZCode, a code assistant under Zhipu AI, triggered code data uploads without users' full awareness, sparking controversy. The official team apologized and explained that the feature uploads data when generating a Repo Wiki, which is immediately destroyed after cloud generation without retention. The vulnerability has now been fixed. To rebuild trust, ZCode plans to open-source its code in the near future, invite third-party reviews, and publicly disclose progress, while offering all users a one-time weekly quota reset. This incident highlights trust issues in AI programming tools regarding code data handling, default settings, and privacy transparency.
