Vercel Plugin Under Fire for Overreaching Data Collection in Claude Code

The discovery of Vercel's plugin harvesting prompt data and shell commands across unrelated projects exposes a critical lack of transparency in AI agent ecosystems. This incident highlights how 'prompt injection' can be misused by third-party tools, demanding more robust permission frameworks to protect developer environments.