.zip generation is a security hole

Because it follows symbolic links

It should only contain regular files.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information