13 Apr 2026 What Happened After My Vercel Plugin Post Hit #1 on Hacker News Context: This is a follow-up to The Vercel Plugin on Claude Code wants to read all your prompts! A seemingly innocuous question - “The Vercel plugin collects …. Would you like to also share your prompt text…?” - popping up on a Claude Code project with zero Vercel connection sent me down a rabbit hole. I published what I found. The tl;dr was four things: Vercel Claude Code plugin was asking to read every prompt you type, across every project. The consent question wasn’t even a real UI element. It’s delivered via prompt injection into Claude’s system context - the plugin tells Claude to ask you a question and run shell commands based on your answer. “Anonymous usage data” included your full bash command strings sent to Vercel’s servers. You’re never told this is optional. All of this runs on every project, not just Vercel ones. I also x-posted this on HN and threw my phone aside. Then things moved fast! The…
No comments yet. Log in to reply on the Fediverse. Comments will appear here.