What is prismor CLAUDE.md?

Repository instructions for working on Prismor, a security package for AI coding agents. They describe runtime protection, secret hiding, threat-feed files, and where security-sensitive code lives.

Use them when changing Prismor runtime policies, secret-protection code, threat-feed automation, or related documentation.

They help prevent accidental secret leaks, unsafe edits, and changes that bypass the repository’s security controls.

How PrismorSec/prismor configures Claude Code

Reuse

Borrowing it

Nothing to install: this file belongs to PrismorSec/prismor. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/PrismorSec/prismor/main/CLAUDE.md

Clone the repo

git clone --depth 1 https://github.com/PrismorSec/prismor

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/prismorsec/prismor/claude-md.svg)](https://agentmods.dev/instructions/prismorsec/prismor/claude-md)

Your own site

<a href="https://agentmods.dev/instructions/prismorsec/prismor/claude-md"><img src="https://agentmods.dev/badge/instructions/prismorsec/prismor/claude-md.svg" alt="Measured on agentmods" height="20"></a>

Per session 359 This file is loaded in full into every session.

When invoked 359 The same file — it is already loaded in full.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00359	$0.00359
Opus 5	$0.00179	$0.00179
Sonnet 5	$0.00072	$0.00072
Haiku 4.5	$0.00036	$0.00036

Measured 8d ago against content hash e81b7150182c, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

prismor CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 21 lines

What it actually says

Prismor Security — CLAUDE.md

This project is the Prismor security package for AI coding agents.

Prismor Runtime Protection

This repo has Prismor hooks enabled. The hook dispatcher at prismor/runtime/cli.py monitors tool calls and blocks dangerous actions in real time.

Cloaking (secret prevention)

The prismor/runtime/cloaking/ subsystem is Prismor's prevention layer for secret leaks. Real secret values live under ~/.prismor/secrets/ and are referenced in tool calls as @@SECRET:<name>@@. When editing this subsystem, treat it as security-sensitive code and never print, log, or narrate real secret values — use the placeholder form in all examples and prose. See prismor/runtime/cloaking/README.md for the full design and AGENTS.md for editing guidelines.

Working in This Repo

The advisories/ directory contains the signed threat feed — do not manually edit it. Use the pipeline scripts.
The prismor/runtime/ directory is the runtime policy engine. Changes to policies.py affect what gets blocked in enforce mode.
The pipeline/ directory contains the NVD fetch/merge/sign automation. The schema at pipeline/schemas/threat-object.schema.json is the source of truth for feed structure.
Run python3 scripts/upgrade_feed.py after pipeline changes to retroactively improve existing advisories.
Run bash scripts/verify_feed.sh to verify feed signature integrity.
Public key for signature verification is at keys/public.pub.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

8d ago First seen · 21 lines · 359 tokens per session scan A e81b7150182c

Subscribe to this mod's changes

prismor CLAUDE.md is an instructions file published in the GitHub repository PrismorSec/prismor (339 stars, last pushed today), licensed Apache-2.0. It adds 359 tokens to every session, about $0.0018 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Security agent-security agents ai-security cybersecurity skill-scanner

codex AGENTS.md

AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.

openai/codex · 5,153 tokens

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 6,785 tokens

prismor: Instructions file for Claude Code