vercel-plugin

Comprehensive Vercel ecosystem plugin — relational knowledge graph, skills for every major product, specialized agents, and Vercel conventions. Turns any AI agent into a Vercel expert.

AI & Machine Learning

Explore on GitHub Read Hacker News discussions

2Distinct people

2Mentions

0Explicit recommenders

335GitHub stars

REPOSITORY AT A GLANCE

What to know before exploring

What it is

Comprehensive Vercel ecosystem plugin — relational knowledge graph, skills for every major product, specialized agents, and Vercel conventions. Turns any AI agent into a Vercel expert.

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 8–Nov 15 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/15/2026, 2:04:58 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by hour2 dated mentions

Observed mentions: 2026-04-09 16:18:17 UTC to 2026-04-09 18:05:16 UTC.

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges

UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
Period	Start (UTC)	End (exclusive, UTC)	Mentions	Comments
Apr 9, 16:00	2026-04-09 16:00:00 UTC	2026-04-09 17:00:00 UTC	1	1
Apr 9, 17:00	2026-04-09 17:00:00 UTC	2026-04-09 18:00:00 UTC	0	0
Apr 9, 18:00	2026-04-09 18:00:00 UTC	2026-04-09 19:00:00 UTC	1	1

What Hacker News says

2 sources

croemer·Apr 9, 2026

The article doesn't link to the code that shows all bash tool uses are sent to Vercel servers by default, i.e. even without opt-in. Here's the relevant line as a GitHub permalink: https://github.com/vercel/vercel-plugin/blob/b95178c7d8dfb2d...

In The Vercel plugin on Claude Code wants to read your prompts

btown·Apr 9, 2026

To be sure, the problem isn't that the plugin injects behavior into the system prompt - that's every plugin and skill, ever. But this is just such a breach of trust, especially the on-by-default telemetry that includes full bash commands. Per the OOP: > That middle row. Every bash command - the full command string, not just the tool name - sent to telemetry.vercel.com. File paths, project names, env variable names, infrastructure details. Whatever’s in the command, they get it. (Needless to say, this is a supply chain attack in every meaningful way, and should be treated as such by security teams.) And the argument that there's no CLI space to allow for opt-in telemetry is absurd - their readme https://github.com/vercel/vercel-plugin?tab=readme-ov-file#i... literally has you install the Vercel plugin by calling `npx` https://www.npmjs.com

Read the rest

/package/plugins which is written by a Vercel employee and could add this opt-in at any time. IMO Vercel is not a good actor. One could make a good argument that they've embrace-extend-extinguished the entire future of React as an independent and self-contained foundational library, with the complexity of server-side rendering, the undocumented protocols that power it, and the resulting tight coupling to their server environments. Sadly, this behavior doesn't surprise me. EDIT: That `npx plugins` code? It's not on Github, exists only on NPM, and as of v1.2.9 of that package, if you search https://www.npmjs.com/package/plugins?activeTab=code it literally sends telemetry to https://plugins-telemetry.labs.vercel.dev/t already, on an opt-out basis! I mean, you have to almost admire the confidence.

In The Vercel plugin on Claude Code wants to read your prompts