Vercel COO
@jdewitt29 warns that employees vibe-coding internal apps could accidentally expose sensitive data about every coworker:
"The level of shadow IT is probably at an all-time high."
"Let’s say someone on the people team vibe codes a performance application, and they don’t know to restrict that to just the people team. All of a sudden, everybody at the company can see performance data for every employee."
"When folks are connecting to Salesforce, Snowflake, Linear, Slack, they’re getting these long-lived API keys, and that creates a ton of supply chain risk."
"Instead, we give you a minimally scoped short-lived token so you can get into just the part that’s required for that specific app or agent, but not the whole wide world."
@vercel