PrismorSec

Issues somebody may already be working on are listed last. List everything by date

• data_boundary outbound parsing misreads argv0 and quoted pipes (file-upload-to-external, pii-to-external)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 74/100

  PrismorSec/prismor#598 · Opened Oct 7, 2026

  Maintainers usually reply within 1 day

• pkg-install-vulnerable-version treats partial version specs as exact versions

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 76/100

  PrismorSec/prismor#599 · Opened Oct 7, 2026

  Maintainers usually reply within 1 day

• Inert context: heredoc-to-file bodies, for-loop word lists and `prismor check` arguments still block

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 60/100

  PrismorSec/prismor#596 · Opened Oct 7, 2026

  Maintainers usually reply within 1 day

• dns-exfiltration never fires on `$(…)` / backtick query names

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 74/100

  PrismorSec/prismor#597 · Opened Oct 7, 2026

  Maintainers usually reply within 1 day

• evasion-detection flags re-running an identical command as evasion

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 68/100

  PrismorSec/prismor#595 · Opened Oct 7, 2026

  Maintainers usually reply within 1 day

• Tag-sequence rules re-fire on every later call in a session

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 64/100

  PrismorSec/prismor#593 · Opened Oct 7, 2026

  Maintainers usually reply within 1 day

• staged-execution warns on almost every write-then-run workflow

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 Half a day Newbie friendliness 66/100

  PrismorSec/prismor#594 · Opened Oct 7, 2026

  Maintainers usually reply within 1 day

• prismor-vault-access is a plain substring check and fires on test fixtures and docs

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 Half a day Newbie friendliness 66/100

  PrismorSec/prismor#592 · Opened Oct 7, 2026

  Maintainers usually reply within 1 day

• Semantic guard blocks prompts the user typed, subagent hand-backs, and the agent's own subagent briefs

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 72/100

  PrismorSec/prismor#590 · Opened Oct 7, 2026

  Maintainers usually reply within 1 day

• prompt-injection pattern 0 fires on security docs and project memory (CLAUDE.md / AGENTS.md)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  PrismorSec/prismor#591 · Opened Oct 7, 2026

  Maintainers usually reply within 1 day

• Full type checking does not finish within 15 minutes

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  PrismorSec/prismor#585 · Opened Oct 5, 2026

  Maintainers usually reply within 1 day

• Add Hugging Face API key pattern to default_policy.yaml

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 76/100

  PrismorSec/prismor#580 · Opened Oct 4, 2026

  Maintainers usually reply within 1 day

• skills audit flags Prismor's own bundled immunity-agent skill as CRITICAL

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 68/100

  PrismorSec/prismor#554 · Opened Sep 30, 2026

  Maintainers usually reply within 1 day

• pricing: long-context (>200k input) tier not applied; [1m] models price at base rate

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 68/100

  PrismorSec/prismor#551 · Opened Sep 30, 2026

  Maintainers usually reply within 1 day

• What happens when user re-install prismor or run prismor setup already having it enforced globally?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 30/100

  PrismorSec/prismor#535 · Opened Sep 29, 2026

  Maintainers usually reply within 1 day

• Per-tool contracts: declare what a tool's output does to the session, and what a call requires of it

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:runtime enhancement roadmap

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  PrismorSec/prismor#532 · Opened Sep 28, 2026

  Maintainers usually reply within 1 day

• Egress allowlist should auto-populate values from previous network requests

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  PrismorSec/prismor#510 · 6 comments · Opened Sep 26, 2026

  Maintainers usually reply within 1 day

• Verify Hermes and OpenClaw integrations actually load and block (registry/installer mismatch, JS plugin for a Python agent)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:integrations bug

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  PrismorSec/prismor#492 · Opened Sep 24, 2026

  Maintainers usually reply within 1 day

• Programmable workspace policies (.prismor/policies/*.py) and shareable policy packs

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:runtime enhancement roadmap

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  PrismorSec/prismor#491 · Opened Sep 24, 2026

  Maintainers usually reply within 1 day

• Opt-in developer-workflow guardrails: git history loss, live infra, releases, runaway processes, agent loops

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:runtime enhancement

  Difficulty 5/5 Over a week Newbie friendliness 28/100

  PrismorSec/prismor#490 · Opened Sep 24, 2026

  Maintainers usually reply within 1 day

• prismor status reports hooks as installed without checking they can run: add a hook self-test (doctor)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:integrations area:runtime enhancement

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  PrismorSec/prismor#489 · Opened Sep 24, 2026

  Maintainers usually reply within 1 day

• Evidence-carrying per-agent enforcement matrix + daily live-CLI canary to catch hook schema drift

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:ci area:integrations area:tests enhancement

  Difficulty 5/5 Over a week Newbie friendliness 30/100

  PrismorSec/prismor#482 · Opened Sep 24, 2026

  Maintainers usually reply within 1 day

• Install turn-end (Stop) hooks and add an `instruct` verdict — the E2BIG reason for skipping Stop does not hold

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:integrations area:runtime enhancement

  Difficulty 5/5 Over a week Newbie friendliness 45/100

  PrismorSec/prismor#480 · Opened Sep 24, 2026

  Maintainers usually reply within 1 day

• DEMO TIME 🚀

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  documentation good first issue help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  PrismorSec/prismor#447 · 2 comments · Opened Sep 20, 2026

  Maintainers usually reply within 1 day

• docs: session screenshot predates the Sessions redesign

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:dashboard documentation good first issue

  Difficulty 2/5 1-3 hours Newbie friendliness 65/100

  PrismorSec/prismor#413 · 1 comment · Opened Sep 15, 2026

  Maintainers usually reply within 1 day

• Classification of categories in prismor replay and dashboard

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:dashboard enhancement help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  PrismorSec/prismor#404 · 1 comment · Opened Sep 13, 2026

  Maintainers usually reply within 1 day

• Have a clear difference between prismor enterprise and OSS when installed to avoid conflicting policies

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:deployment area:runtime bug documentation help wanted

  Difficulty 3/5 1-2 days Newbie friendliness 55/100

  PrismorSec/prismor#403 · 1 comment · Opened Sep 13, 2026

  Maintainers usually reply within 1 day

• Prismor is blind to container execution: host-absolute hook paths, and cloaking that degrades open

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:deployment area:runtime enhancement help wanted roadmap security

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  PrismorSec/prismor#387 · 1 comment · Opened Sep 9, 2026

  Maintainers usually reply within 1 day

• Decision legibility: a developer should be able to tell why an agent was allowed, blocked, or escalated in seconds

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:dashboard area:runtime enhancement help wanted roadmap

  Difficulty 5/5 Over a week Newbie friendliness 45/100

  PrismorSec/prismor#358 · Opened Sep 5, 2026

  Maintainers usually reply within 1 day

• MDM Fleet Deployment (Jamf/Intune): packaging, Windows support, and fleet enrollment token

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:deployment enhancement help wanted roadmap

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  PrismorSec/prismor#350 · Opened Sep 4, 2026

  Maintainers usually reply within 1 day

• Bind a cloaked secret to the destinations it may travel to

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:cloaking enhancement help wanted security

  Difficulty 5/5 Over a week Newbie friendliness 38/100

  PrismorSec/prismor#297 · 2 comments · Opened Aug 17, 2026

  Maintainers usually reply within 1 day

• Standalone client SDKs (Python + TypeScript) for integration

  May be free again A pull request for this issue was closed without being merged. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:integrations enhancement help wanted roadmap

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  PrismorSec/prismor#281 · Opened Aug 12, 2026

  Maintainers usually reply within 1 day

• Kubernetes deployment via Helm chart

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:deployment enhancement help wanted roadmap

  Difficulty 5/5 Over a week Newbie friendliness 45/100

  PrismorSec/prismor#279 · Opened Aug 12, 2026

  Maintainers usually reply within 1 day

• Agent-to-agent governance with consent escalation broker

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:runtime enhancement help wanted roadmap

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  PrismorSec/prismor#276 · Opened Aug 12, 2026

  Maintainers usually reply within 1 day

• Zero standing privileges with DPoP-bound ephemeral tokens

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:runtime enhancement help wanted roadmap security

  Difficulty 5/5 Over a week Newbie friendliness 32/100

  PrismorSec/prismor#275 · Opened Aug 12, 2026

  Maintainers usually reply within 1 day

• Support OPA/Rego policies alongside YAML

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:runtime enhancement help wanted roadmap

  Difficulty 5/5 Over a week Newbie friendliness 42/100

  PrismorSec/prismor#274 · Opened Aug 12, 2026

  Maintainers usually reply within 1 day

• MCP per-tool budget enforcement and tool-call circuit breakers

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:mcp enhancement help wanted roadmap

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  PrismorSec/prismor#273 · Opened Aug 12, 2026

  Maintainers usually reply within 1 day

• Runaway agent loop detection and circuit breakers

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:runtime enhancement help wanted roadmap

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  PrismorSec/prismor#272 · 2 comments · Opened Aug 12, 2026

  Maintainers usually reply within 1 day

• Per-identity sliding-window rate limiting

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:runtime enhancement help wanted roadmap

  Difficulty 5/5 Over a week Newbie friendliness 48/100

  PrismorSec/prismor#271 · Opened Aug 12, 2026

  Maintainers usually reply within 1 day

• Mid-stream cutoff for streaming agent output

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:proxy area:runtime enhancement help wanted roadmap

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  PrismorSec/prismor#270 · Opened Aug 12, 2026

  Maintainers usually reply within 1 day

• Pre-call budget enforcement with multi-window cost limits

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:runtime enhancement help wanted roadmap

  Difficulty 5/5 Over a week Newbie friendliness 42/100

  PrismorSec/prismor#269 · Opened Aug 12, 2026

  Maintainers usually reply within 1 day

• Codex has no file-tool events at all (everything is Bash): file_read/file_write rules are unreachable

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:integrations bug enhancement help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 50/100

  PrismorSec/prismor#259 · 3 comments · Opened Aug 10, 2026

  Maintainers usually reply within 1 day

• Per-agent mode override silently suppresses blocks with no signal in CLI, audit trail, or stderr

  May be free again A pull request for this issue was closed without being merged. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:runtime bug security

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  PrismorSec/prismor#256 · Opened Aug 10, 2026

  Maintainers usually reply within 1 day

• Proposal: benchmark action-boundary divergence across runtime control planes

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:runtime area:tests question

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  PrismorSec/prismor#252 · 6 comments · Opened Aug 9, 2026

  Maintainers usually reply within 1 day

• Forward signed audit-record provenance through telemetry sinks

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:runtime enhancement good first issue help wanted security

  Difficulty 4/5 3-5 days Newbie friendliness 68/100

  PrismorSec/prismor#26 · 3 comments · Opened May 2, 2026

  Maintainers usually reply within 1 day

• Contextual verification: unquoted heredocs with command substitutions bypass runtime enforcement via inert sinks (follow up to #531, #558)

  Possibly taken @Madhumasa84 claimed this today. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 Half a day Newbie friendliness 45/100

  PrismorSec/prismor#587 · Opened Oct 6, 2026

  Maintainers usually reply within 1 day

• Gateway plugins (OpenClaw/Hermes/OpenCode) block the event loop with execSync and fail open silently on timeout

  Possibly taken @Ar9av claimed this 8 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:integrations bug performance

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  PrismorSec/prismor#488 · Opened Sep 24, 2026

  Maintainers usually reply within 1 day

• perf: evaluate hooks in a warm fork-server daemon (hookd)

  Possibly taken A pull request linked to this issue is open or already merged. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:runtime enhancement performance

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  PrismorSec/prismor#479 · Opened Sep 24, 2026

  Maintainers usually reply within 1 day

• feat(discover): inventory the browser WebMCP surface

  Possibly taken @Ar9av claimed this 35 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:integrations area:runtime enhancement help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  PrismorSec/prismor#339 · Opened Sep 1, 2026

  Maintainers usually reply within 1 day

• Harden OSS CI: CodeQL, Scorecard, dependabot, dependency scanning

  Possibly taken @Madhumasa84 claimed this 53 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  area:ci enhancement good first issue help wanted security

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  PrismorSec/prismor#282 · Opened Aug 12, 2026

  Maintainers usually reply within 1 day