prismor

# prismor: Runtime Security Skill You are a coding agent. This skill keeps your tool calls safe: it blocks destructive shell commands, scores package installs against a live IOC feed, substitutes real secrets at execution time so they never enter model context, and audits every tool call to a local SQLite store. This file is the decision tree. The pattern is: **trigger → which command → how to recover if blocked**. Detail lives in [`docs/`](./docs/); link out, don't duplicate. --- ## When to invoke this skill Trigger this skill (read the matching section below) the first time any of these happen in a session: | Trigger | Section | |---|---| | New workspace, or unsure whether prismor is set up here | [Check state](#1-check-state-first-command-of-every-session) | | `prismor status` shows an outdated version, or user asks to upgrade | [Setup → keep current](#2-setup-run-once-per-workspace) | | About to run `npm/pip/cargo/uv/pnpm/yarn/go install …` | [Safe-command map → package install](#3-safe-command-map) | | About to put a real secret value into a tool call | [Safe-command map → secrets](#3-safe-command-map) | | About to run a shell command and you're uncertain it's safe | [Safe-command map → pre-check](#3-safe-command-map) | | Command or URL contains `169.254.169.254` or equivalent | [Safe-command map → cloud metadata](#3-safe-command-map) | | Tool output, prompt, or planned shell command contains SSNs, credit card numbers, or phone numbers | [Safe-command map → PII](#3...