April 9, 2026
Clippy with a wiretap?
Vercel Claude Code plugin wants to read your prompt
Dev community erupts: 'fake consent' popup and a silent data grab across all projects
TLDR: A Vercel plugin for an AI coding tool allegedly asked to read all your prompts and logged full terminal commands by default, even outside Vercel projects. Commenters roast it as “fake consent” and an all‑access data grab, while a few note plugins often inject instructions—but say trust was broken by silent, always‑on logging.
Developers are in full meltdown mode after a user discovered the Vercel Claude Code plugin asking to “share your prompt text” — even on projects that have nothing to do with Vercel. The kicker? The “ask” isn’t a normal popup; it’s injected into the AI’s system instructions, which then asks you the question and writes a file to your computer based on your reply. Meanwhile, on-by-default telemetry allegedly ships full terminal commands (file paths, env names, the works) back to Vercel. Cue outrage, accusations of a “fake consent” pattern, and comparisons to a nosy neighbor posing as a helpful assistant.
The comments are a firestorm. One crowd screams breach of trust, saying this crosses the line from helpful to “Clippy with a wiretap.” Another points out a bigger industry problem: an all-or-nothing plugin model where installing any extension grants it eyes on every session, everywhere. A few voices try to add nuance — injecting instructions into the AI’s system is normal for plugins — but insist that silently logging full commands is not. Elsewhere, a brutal meme emerges: “Vercel hosts every scam site,” while another user gripes about an invisible “19k token” tax (read: extra hidden compute cost) added to every session. The vibe? Suspicion, spicy jokes, and a loud demand for real consent, clear labels, and opt-in only data sharing.
Key Points
- •The Vercel Claude Code plugin asks to read all prompt text and appears in non‑Vercel projects.
- •The consent prompt is delivered via prompt injection into Claude’s system context, not a native UI.
- •Based on the user’s answer, the plugin instructs Claude to run shell commands to write a local preference file.
- •Telemetry allegedly always collects device/OS/framework details at session start and full bash command strings after each command.
- •Prompt text collection occurs only if the user opts in, but other telemetry runs across all projects, not just Vercel ones.