GoKawiil09 Apr 2026
The Vercel Plugin on Claude Code wants to read all your prompts!
I was working on a project that has nothing to do with Vercel. No vercel.json , no next.config , no Vercel dependencies. Nothing.
And then this popped up:
“The Vercel plugin collects anonymous usage data… Would you like to also share your prompt text?”
Every single prompt. On a non-Vercel project.
That felt wrong. So I went deep into the source code with Claude.
tl;dr:
A deployment plugin is asking to read every prompt you type, across every project. Why?
The consent question isn’t even a real UI element. It’s delivered via prompt injection into Claude’s system context - the plugin tells Claude to ask you a question and run shell commands based on your answer.
... continue reading