prismor

Enforce security policies on AI agent tool calls and audit activity.

280|26|Updated Feb 20, 2026
One-click install
npx skills add https://github.com/PrismorSec/prismor --skill prismor
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: prismor
Source: https://github.com/PrismorSec/prismor/tree/main
Command: npx skills add https://github.com/PrismorSec/prismor --skill prismor

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pypdf, pdfplumber, pdf2image, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Prismor addresses the security risks posed by AI coding agents by blocking dangerous actions, intercepting package installs, preventing secret leaks, and auditing session activity in real-time.

Core Features & Use Cases

  • Blocking Dangerous Actions: Intercepts and blocks destructive commands, secret exfiltration attempts, and prompt injection attempts before they run.
  • Intercept Package Installs: Evaluates package installations against threat intelligence before they are executed.
  • Prevent Secret Leaks: Substitutes real secret values with placeholders and scrubs output to prevent sensitive information from reaching the model.
  • Log and Audit: Records every tool call and maintains a tamper-evident audit trail of all agent actions.
  • Discover Shadow AI: Flags AI agents running without Prismor hooks on the host machine.
  • Attestation: Generates signed evidence bundles for auditors to verify the security posture and compliance of the system.

Quick Start

Install Prismor hooks into your project to enforce policy on agent tool calls:

prismor install-hooks --agent claude --workspace . --mode enforce

Frequently Asked Questions about prismor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent AI coding agents from leaking secrets or executing dangerous commands?

Runtime security for AI coding agents intercepts dangerous tool calls, blocks destructive commands, and substitutes real secret values with placeholders to prevent sensitive information from reaching the model.

Can I audit and log package installations executed by autonomous coding agents?

Yes, you can audit package installations by evaluating them against threat intelligence before execution. The system records every tool call and maintains a tamper-evident audit trail of all agent actions.

How do I enforce security policies on tool calls in Python agent frameworks?

You can enforce security policies by installing runtime hooks into your project. This intercepts prompt injection attempts and enforces tool call rules before the agent executes any code.

Does runtime protection for AI agents work with existing CI/CD pipelines?

Runtime protection integrates with major AI coding agents and frameworks. It requires Python and provides a dashboard for monitoring activity, and generates signed evidence bundles for compliance auditors.

What is shadow AI discovery and how does it secure AI development environments?

Shadow AI discovery secures environments by scanning the host machine to flag any AI agents running without security hooks. This ensures all autonomous coding sessions are monitored and policy-enforced.

Best way to block prompt injection attacks targeting autonomous coding agents?

The best way to block prompt injection attacks is deploying runtime security hooks that intercept and evaluate agent tool calls in real-time, blocking malicious prompts before they execute.