prismor good first issues (Python)

scoped-agent denials over-block: only measured cause of blocking legitimate actions (utility control 100% -> 33%) 3 days ago

bug help wanted area:runtime

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Codex has no file-tool events at all (everything is Bash): file_read/file_write rules are unreachable 6 days ago

bug enhancement help wanted area:integrations

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Decide block/warn policy for high-FP-risk operations (T1-T15 gap-hunt residuals) 21 days ago

help wanted question area:runtime

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

prevent verdict index shift and cache poisoning in batched window analysis 26 days ago

bug help wanted area:runtime security

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Runaway agent loop detection and circuit breakers 30 days ago

enhancement help wanted area:runtime roadmap

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

perf: remote policy is signature-verified and parsed ~9× per hook call about 1 month ago

good first issue area:runtime performance

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

redact upstream HTTP 4xx/5xx error bodies to prevent secret leakage about 1 month ago

bug good first issue area:cloaking area:proxy security

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Forward signed audit-record provenance through telemetry sinks about 1 month ago

enhancement good first issue help wanted area:runtime security

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Pre-call budget enforcement with multi-window cost limits about 1 month ago

enhancement help wanted area:runtime roadmap

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Mid-stream cutoff for streaming agent output about 1 month ago

enhancement help wanted area:runtime area:proxy roadmap

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Per-identity sliding-window rate limiting about 1 month ago

enhancement help wanted area:runtime roadmap

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

MCP per-tool budget enforcement and tool-call circuit breakers about 1 month ago

enhancement help wanted area:mcp roadmap

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Support OPA/Rego policies alongside YAML about 1 month ago

enhancement help wanted area:runtime roadmap

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Zero standing privileges with DPoP-bound ephemeral tokens about 1 month ago

enhancement help wanted area:runtime security roadmap

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Agent-to-agent governance with consent escalation broker about 1 month ago

enhancement help wanted area:runtime roadmap

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Add SECURITY.md, CONTRIBUTING.md, and CODE_OF_CONDUCT.md about 1 month ago

documentation good first issue

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Ship official Docker image and docker-compose about 1 month ago

enhancement good first issue help wanted area:ci area:deployment

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Kubernetes deployment via Helm chart about 1 month ago

enhancement help wanted area:deployment roadmap

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Standalone client SDKs (Python + TypeScript) for integration about 1 month ago

enhancement help wanted area:integrations roadmap

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Harden OSS CI: CodeQL, Scorecard, dependabot, dependency scanning about 1 month ago

enhancement good first issue help wanted area:ci security

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Bind a cloaked secret to the destinations it may travel to about 1 month ago

enhancement help wanted area:cloaking security

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

feat(discover): inventory the browser WebMCP surface about 1 month ago

enhancement help wanted area:runtime area:integrations

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

MDM Fleet Deployment (Jamf/Intune): packaging, Windows support, and fleet enrollment token about 1 month ago

enhancement help wanted area:deployment roadmap

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Decision legibility: a developer should be able to tell why an agent was allowed, blocked, or escalated in seconds about 1 month ago

enhancement help wanted area:runtime area:dashboard roadmap

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Prismor is blind to container execution: host-absolute hook paths, and cloaking that degrades open about 1 month ago

enhancement help wanted area:runtime area:deployment security roadmap

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Have a clear difference between prismor enterprise and OSS when installed to avoid conflicting policies about 1 month ago

bug documentation help wanted area:runtime area:deployment

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Classification of categories in prismor replay and dashboard about 1 month ago

enhancement help wanted area:dashboard

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

docs: session screenshot predates the Sessions redesign about 1 month ago

documentation good first issue area:dashboard

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

optimize test suite module-state leak guard overhead (-30% test suite runtime) about 1 month ago

enhancement help wanted area:tests performance

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

DEMO TIME 🚀 about 1 month ago

documentation good first issue help wanted

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

proxy: deferring the session snapshot by event count hides short sessions entirely about 1 month ago

bug good first issue help wanted area:proxy performance

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

bug(provenance): cp/mv drops UNTRUSTED tag because _grams checks command string instead of source file (#379) about 1 month ago

bug help wanted area:runtime area:provenance security

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

bug(provenance): subshell command substitution $(curl ...) bypasses provenance fetch tracking about 1 month ago

bug help wanted area:provenance security

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

openai-agents adapter blocks in observe mode; four adapter test files never collect in a full run about 1 month ago

bug good first issue area:integrations

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

Cloak: writing about the placeholder syntax is blocked (docs, commit messages, tests) 2 months ago

bug good first issue

PrismorSec/prismor

296

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude,codex etc.)

Python

#agent-control-plane#agent-security#agents#ai-agents#ai-security#claude-code#control-plane#cursor#cybersecurity#devsecops#guardrails#llm-security#mcp#owasp#prompt-injection#secrets-management#security#skill-scanner#supply-chain-security#tool-calls

PrismorSec/prismor

Open Issues Need Help