Radar / AI security / Prismor
Prismor: open-source runtime control plane between coding agents and their tool calls
Self-hosted runtime security layer that checks every tool call an AI coding agent makes against policy before it executes - allow, warn or block. Claude Code, Codex, Cursor and Windsurf supported from day one.
Why it matters
Closes the pre-execution gap the GitSpawn disclosures (8 vulns across 7 agents, 4 still unpatched) exposed: approval prompts fire after hooks, not before. Policy enforcement happens at the tool-call boundary, not in the agent's self-report.
What you could build with it
An engineering team can put Prismor in front of Claude Code or Cursor so installing packages or reading credentials needs an explicit policy allowance.
First spotted on engineering blog: source.
More AI security
Cloudflare security-audit-skill: multi-phase security audits for coding agentsA coding-agent skill that runs multi-phase security audits with independently verified, machine-checkable findings.security · JEV 0.63Sandlock 0.8.8: deferred commit for agent sandboxesThe process-based Linux AI sandbox (no container, no VM) ships deferred commit: every run returns a changeset of what…security · JEV 0.56ClawSecure: free security scanner for OpenClaw AI agent skillsFree scanner that audits OpenClaw agent skills for vulnerabilities; the maker's audit of 2,890+ OpenClaw skills found…security · JEV 0.5Google DeepMind SynthID BioWatermarking technology that embeds an imperceptible, verifiable signature into AI-designed protein sequences and…security · JEV 0.49GitHub Security Lab Taskflow Agent: autonomous LLM fuzzing for C/C++Open-source agent that automates the full fuzzing lifecycle - entry-point discovery, harness generation, AFL++ runs…security · JEV 0.47LLM Agents Can Easily Tamper With Their Own TracesAn empirical study (arXiv 2026-09-24) showing that all tested local coding-agent harnesses except Muse Code allowed…security · JEV 0.4
Get the week's best AI launches, plus 3 ideas worth building
One email every Saturday. Ranked by traction, not hype. Free.