prismor

security、automation、monitoring

来源： admin_cms · cms editor · 2026/8/21

{"en":"Prismor intercepts tool calls at the agent layer rather than relying on OS-level monitoring, effectively preventing malicious AI actions. It is well-suited for development teams integrating AI coding assistants into production environments with strict permission requirements.","zh":"Prismor 通过在代理层拦截工具调用而非仅依赖操作系统监控，能有效防止 AI 代理执行恶意操作。它特别适合需要将 AI 编码助手接入生产环境并进行严格权限管控的开发团队。"}

来源： admin_cms · cms editor · 2026/8/21

{"steps":[{"en":"Install the Prismor core package using pip.","zh":"使用 pip 安装 Prismor 核心包。"},{"en":"Run the setup command to configure security policies.","zh":"运行初始化命令以配置安全策略。"},{"en":"Launch or wrap your AI agent with Prismor to begin monitoring.","zh":"通过 Prismor 启动或挂载 AI 代理以开始监控。"}],"installAt":"local","difficulty":"medium"}

来源： admin_cms · cms editor · 2026/8/21

{"en":"Prismor is a runtime security control plane designed for AI coding agents. It establishes a protective layer between agents and system resources, monitoring and managing shell command execution, file I/O, and API calls to mitigate risks such as prompt injection, privilege escalation, and supply chain attacks.\n\nSupporting a wide range of AI agent frameworks, Prismor allows users to implement 'observe' or 'enforce' modes via custom policies. Key features include an MCP gateway, semantic guardrails, honeytoken credential planting, and Ed25519-signed audit trails to ensure agent behavior is traceable and compliant.","zh":"Prismor 是一个专为 AI 编码代理设计的运行时安全控制平面。它通过在代理与系统资源之间建立防护层，监控并管理代理的 shell 命令执行、文件读写及 API 调用，从而降低提示词注入、权限提升及供应链攻击风险。\n\n该项目支持多种主流 AI 代理框架，允许用户通过自定义策略实现「观察模式」或「强制执行模式」。其核心功能包括 MCP 网关、语义防护、蜜罐凭证植入以及基于 Ed25519 签名的审计追踪，确保 AI 代理的行为可追溯且符合安全规范。"}

来源： admin_cms · cms editor · 2026/8/21

v1.42.2

来源： GitHub 官方接口 · latest_release=v1.42.2 · 2026/8/16

Apache-2.0

来源： GitHub 官方接口 · license.spdx_id=Apache-2.0 · 2026/8/16

否

来源： admin_cms · cms editor · 2026/8/21

{"en":"A self-hosted runtime security control plane for AI coding agents, providing real-time monitoring, blocking, and human-in-the-loop approval for tool calls.","zh":"用于 AI 编码代理的自托管运行时安全控制平面，支持对代理工具调用进行实时监控、拦截及人工审核。"}

来源： admin_cms · cms editor · 2026/8/21

macos、linux、windows

来源： admin_cms · cms editor · 2026/8/21

ai-apps

来源： 项目说明文档 · hint=ai-apps · 2026/8/16

cli、library_framework

来源： admin_cms · cms editor · 2026/8/21

devops、security、backend

来源： admin_cms · cms editor · 2026/8/21

否

来源： admin_cms · cms editor · 2026/8/21

是

来源： admin_cms · cms editor · 2026/8/21

是

来源： admin_cms · cms editor · 2026/8/21