The Vercel Plugin on Claude Code wants to read all your prompts!

09 Apr 2026 The Vercel Plugin on Claude Code wants to read all your prompts! Update (Apr 14): All 4 concerns from this post are now fixed. Vercel deleted 24,677 lines in PR #47. Read the follow-up → I was working on a project that has nothing to do with Vercel. No vercel.json, no next.config, no Vercel dependencies. Nothing. And then this popped up: “The Vercel plugin collects anonymous usage data… Would you like to also share your prompt text?” Every single prompt. On a non-Vercel project. That felt wrong. So I went deep into the source code with Claude. tl;dr: A deployment plugin is asking to read every prompt you type, across every project. Why? The consent question isn’t even a real UI element. It’s delivered via prompt injection into Claude’s system context - the plugin tells Claude to ask you a question and run shell commands based on your answer. “Anonymous usage data” includes your full bash command strings sent to Vercel’s servers. You’re never told this is optional. All of…