Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The Vercel plugin on Claude Code wants to read your prompts

akshaychugh.xyz

Post reply on HN
Print view View original

101–110 of 120 posts

Re: The Vercel plugin on Claude Code wants to read your prompts

#101

Post by sibeliuss »

This thing is horrible.

If you have it installed, it will silently inject a warning into claude that you should use tailwind, even if your app is not! Then every single request will silently question the decision as to why yr app is using one thing, rather than another, leading to revisions as it starts writing incorrect code.

I couldn't believe it when I discovered it. For so many reasons I am vehemently anti Vercel. Just discovered this two days ago, after installing their frontend skill.

Re: The Vercel plugin on Claude Code wants to read your prompts

#102

Post by progbits »

jrsj wrote: post #95
phillipcarter wrote: post #30

Earlier quoted context omitted.

[flagged]

Israel has a disproportionately large amount of tech companies for its size and he took one photo with their leader. I have no idea why everyone on the internet wants to endlessly seethe about this & personally attack Guillermo for it as if he’s endorsed their foreign policy or something

If you take a selfie with a sports player, you probably don't endorse their political views, you are just a fan of their play.

If you take a selfie with an author, you probably don't endorse their political views, you just like their books.

If you take a selfie with a politician ...

Re: The Vercel plugin on Claude Code wants to read your prompts

#103

Post by lukan »

jrsj wrote: post #96
Jare wrote: post #54

Earlier quoted context omitted.

> Overall our goal isn't to only collect data, it's to make the Vercel plugin amazing for building and shipping everything. I have no idea how to read this and not go blind. The degree of contempt for your (presumably quite technical) users necessary to do this is astounding. From the article: > That middle row. Every bash command - the full command string, not just the tool name - sent to telemetry.vercel.com. File…

If you’re letting Claude code just handle secrets like this you’re already fucked from a security standpoint so I don’t really see the big deal here Today it was the Vercel plugin but if you’re letting an LLM agent with access to bash and the internet read truly sensitive information then you’re already compromised

I can confirm every action of the agent. So I do have some control over it sending data away vs a plugin that sends everthing by default.

But otherwise yes, I have to trust Antrophic.

Re: The Vercel plugin on Claude Code wants to read your prompts

#105

Post by tracerbulletx »

embedding-shape wrote: post #2

> skills are injected into sessions that have nothing to do with Vercel, Next.js, or this plugin's scope > every skill's trigger rules get evaluated on every prompt and every tool call in every repo, regardless of whether Vercel is in scope > For users working across multiple projects (some Vercel, some not), this is a fixed ~19k token cost on every session — even when the session is pure backend work, data science,…

Engineers were holding back the ocean because no one could even make sense of what they did, even a little bit, so they had power. Now they just threaten to use AI to do what they want unless you do it for them. The leverage is gone, the dike is burst.

Re: The Vercel plugin on Claude Code wants to read your prompts

#107

Post by arcfour »

TheTaytay wrote: post #72
embedding-shape wrote: post #53

Earlier quoted context omitted.

> Maybe the most naive, sheltered thing I've read on this site You must be new then, welcome :) I'm not saying I never believe any individuals in a company intentionally do bad stuff, just that I require evidence of it being intention before I assume it to be intentional. Personally I don't think that's naive, and it is based on ~30-40 years of real world life experience, but I guess I'm ultimately happy that not eve…

Just came to say (since the person you’re responding to has a different view of the world) that I agree with you that this is both a more accurate, and easier way to live. Assuming malice as the default sounds like a recipe for being very, very unhappy.

And yet many people assume malice by default and are unhappy as a result in this day and age. It's unfortunate.

Re: The Vercel plugin on Claude Code wants to read your prompts

#108

Post by [deleted] »

progbits wrote: post #102
jrsj wrote: post #95

Earlier quoted context omitted.

Israel has a disproportionately large amount of tech companies for its size and he took one photo with their leader. I have no idea why everyone on the internet wants to endlessly seethe about this & personally attack Guillermo for it as if he’s endorsed their foreign policy or something

If you take a selfie with a sports player, you probably don't endorse their political views, you are just a fan of their play. If you take a selfie with an author, you probably don't endorse their political views, you just like their books. If you take a selfie with a politician ...

[deleted]

Re: The Vercel plugin on Claude Code wants to read your prompts

#110

Post by rachel_rig »

lukan wrote: post #103
jrsj wrote: post #96

Earlier quoted context omitted.

If you’re letting Claude code just handle secrets like this you’re already fucked from a security standpoint so I don’t really see the big deal here Today it was the Vercel plugin but if you’re letting an LLM agent with access to bash and the internet read truly sensitive information then you’re already compromised

I can confirm every action of the agent. So I do have some control over it sending data away vs a plugin that sends everthing by default. But otherwise yes, I have to trust Antrophic.

[flagged]
Post reply on HN