Prismor: self-hosted runtime control plane for coding agents
OSS hooks intercept tool calls before execution across ~14 coding agents; observe/enforce policy, secret cloaking, MCP/skill scan, egress allowlists, and a local dashboard.
Topic
supply-chain use cases: 5 examples
Source-linked workflows that name supply-chain. Part of the AI agent use cases on UsecaseBoard, or browse all use cases.
Snyk Evo Agentic AppSec: security agents that find, fix, and verify
Snyk announced Evo Agentic AppSec (Oct 15): purpose-built security agents (Code Scanning, Dependency Firewall, Agentic Security Review, Remediation) that operate Snyk’s deterministic engines as tools, secure agent-written code at inception and work down existing backlogs, with independent verification—Remediation Agent in open preview; others experimental for select customers.
AISLE MCP + package firewall: prove, fix, and block in the IDE
AISLE October rollout (Oct 14): MCP server puts exploit-proven findings into Claude Code/Cursor so agents fix in-editor; plus an AI package firewall that intercepts npm/PyPI/Cargo installs from humans and coding agents, with cooldown and monitoring mode before enforcement.
Chainguard MCP GA: four OAuth servers for agent dependency checks
Enterprise GA for cg-oci, cg-apk, cg-versions, and cg-api so Claude Code/Cursor agents verify image tags, Wolfi package equivalents, EOL status, and org policy/attestations via browser OAuth or chainctl—server-side caps instead of prompt guardrails.
Anaconda MCP GA: remote read-only package facts for agents
Remote MCP at anaconda.com/api/mcp returns package facts, curated CVEs, org channel policy, and forum hits so Claude Code/Cursor/Codex/Kilo check real conda names and vulns before proposing installs—server cannot mutate your machine; agent still runs conda under your permissions.