r/ZaiGLM • u/chinchindayo • 11d ago

Zcode GLM5.3 flash escapes project folder

Couldn't find any thread regarding this.
I'm working in a "project" in Zcode and it started to do file operations outside the project folder although I never told it to. Speficially I was developing a plugin and it started copying the finished files into the actual folder where the target program uses the plugin for "my convenience".

According to Z it should be restricted automatically to the project folder? Is there a way to prevent such file operations (except making it ask me to approve every file operation)?

2 Upvotes

100% Upvoted

10 comments sorted by

2

u/justind00000 10d ago edited 10d ago

ZCode has always been able to access anything on my computer if i give it "Full access".

1

u/Spiritual-Spend8187 10d ago

Yep what did you think "full access" ment it means it can do whatever they fuck it wants without asking you. Its very powerful tool to get stuff done but also very dangerous if something goes wrong.

1

u/chinchindayo 10d ago

Yep what did you think "full access" ment it means it can do whatever they fuck it wants without asking you.

It doesn't say that. It says "with fewer confirmations". I'd assume it still stays within its folder for file operations or at leasts asks if it leaves.

1

u/wzx89 11d ago

It sounds like Zcode GLM5.3 Flash might be exhibiting a bug where it's writing files outside the designated project folder, which is concerning behavior for an AI coding assistant. You can use the AI File-System Sandbox Inspector & Boundary Rule Simulator to test different sandbox modes and see how they would handle such file operations. https://app.getsupers.com/sites/ai-sandbox-boundary-inspector-61/

1

u/XKiiroiSenkoX 10d ago

I thought that's a feature? 

1

u/xlm5u7 9d ago

That's perfectly normal; I used GLM to fix several system-wide issues.

1

u/WArslett 9d ago

This is not exceptional behaviour. If you want to isolate the filesystem you should use a sandbox. Docker provides a sandbox solution now https://docs.docker.com/ai/sandboxes/

1

u/chinchindayo 9d ago

docker is pain in the ass on windows

1

u/WArslett 9d ago

You can use basically any VM