
Security News
Socket Releases Free Certified Patches for Critical vm2 Sandbox Escape
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.
@prismer/claude-code-plugin
Advanced tools
Prismer Evolution plugin for Claude Code β auto-learning from every coding session
Prismer Evolution plugin for Claude Code (v3). Implements an 8-hook evolution architecture that turns coding sessions into transferable knowledge β errors become learning strategies, successful fixes become shared recommendations across all agents.
ββ SessionStart ββββββββββββββββββββββββββββββββββββββββββ
β session-start.mjs β
β 1. Sync pull: trending genes + hot strategies β
β 2. Retry queue: resend any failed session-end pushes β
β 3. Memory pull: inject persistent memory β
β 4. Skill sync: download cloud-installed skills β
β 5. Pre-warm MCP server (background) β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β
ββ Mid-Session βββββββββββΌββββββββββββββββββββββββββββββββ
β βΌ β
β PreToolUse(Bash): pre-bash-suggest.mjs β
β - Stuck detection: same error signal >= 2x in journal β
β - Only queries /analyze when stuck (not every command) β
β β
β PreToolUse(WebFetch): pre-web-cache.mjs β
β - Context cache load (opt-in, disabled by default) β
β - Cache hit β return cached content, skip fetch β
β β
β PostToolUse(Bash|Edit|Write): post-bash-journal.mjs β
β - Writes to LOCAL session-journal.md only β
β - 13 signal patterns for error classification β
β - Tracks signal counts for stuck detection β
β β
β PostToolUse(WebFetch|WebSearch): post-web-save.mjs β
β - Silently caches web content to Prismer Cloud β
β β
β PostToolUseFailure: post-tool-failure.mjs β
β - Direct failure signal extraction to journal β
β β
β SubagentStart: subagent-start.mjs β
β - Injects top strategies + parent signals β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β
ββ Session End βββββββββββΌββββββββββββββββββββββββββββββββ
β βΌ β
β Stop: session-stop.mjs (primary path) β
β 1. Read session journal β has evolution value? β
β 2. YES β block + inject gene adherence self-eval β
β 3. Claude LLM reviews session with full context β
β 4. Calls MCP: evolve_record, evolve_create_gene, β
β memory_write (zero extra LLM cost) β
β β
β SessionEnd: session-end.mjs (fallback path) β
β - Async sync push for gene feedback + signals β
β - Retry queue for failed pushes β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
/plugin marketplace add Prismer-AI/PrismerCloud
/plugin install prismer@prismer
On first enable, Claude Code will prompt for your API key (stored securely in keychain).
claude --plugin-dir /path/to/sdk/prismer-cloud/claude-code-plugin
The plugin reads config from multiple sources (in priority order):
| Source | Variables |
|---|---|
| Environment variables | PRISMER_API_KEY, PRISMER_BASE_URL |
| Claude Code userConfig | Prompted on plugin enable (stored in keychain) |
~/.prismer/config.toml | api_key, base_url (shared with CLI) |
# Option 1: Environment variable
export PRISMER_API_KEY="sk-prismer-..."
# Option 2: Config file
cat > ~/.prismer/config.toml << 'EOF'
api_key = "sk-prismer-..."
base_url = "https://prismer.cloud"
EOF
| Variable | Default | Description |
|---|---|---|
PRISMER_WEB_CACHE_LOAD | 0 | Set to 1 to enable WebFetch cache load (pre-check before fetching) |
PRISMER_SCOPE | auto-detected | Override project scope (default: from package.json name or git remote) |
Registered via hooks/hooks.json:
| Event | Script | Purpose |
|---|---|---|
| SessionStart | session-start.mjs | Sync pull + retry queue + memory + skill sync + MCP pre-warm |
| PreToolUse (Bash) | pre-bash-suggest.mjs | Stuck detection β conditional /analyze query |
| PreToolUse (WebFetch) | pre-web-cache.mjs | Context cache load (opt-in) |
| PostToolUse (Bash|Edit|Write) | post-bash-journal.mjs | Local session journal with signal detection |
| PostToolUse (WebFetch|WebSearch) | post-web-save.mjs | Silent context cache save |
| PostToolUseFailure | post-tool-failure.mjs | Failure signal extraction |
| SubagentStart | subagent-start.mjs | Strategy + signal injection to subagents |
| Stop | session-stop.mjs | Evolution value check β block + gene adherence self-eval |
| SessionEnd | session-end.mjs | Async fallback sync push + retry queue |
Configured via .mcp.json β @prismer/mcp-server provides tools including evolve_analyze, evolve_record, evolve_create_gene, evolve_publish, evolve_delete, memory_write, recall, skill_search, skill_sync, and more.
| Skill | Description |
|---|---|
/prismer:evolve-analyze | Query the evolution network for known fix strategies |
/prismer:evolve-create | Create a new gene from a discovered pattern |
/prismer:evolve-record | Record an outcome after applying a strategy |
/prismer:evolve-session-review | Full session review with gene adherence evaluation |
/prismer:prismer-setup | First-run setup guidance |
claude-code-plugin/
βββ .claude-plugin/
β βββ plugin.json # Plugin manifest (with userConfig)
β βββ marketplace.json # Marketplace catalog
βββ hooks/
β βββ hooks.json # 8 hook entries across 7 events
βββ scripts/
β βββ session-start.mjs # SessionStart: sync + retry + memory + skills
β βββ pre-bash-suggest.mjs # PreToolUse(Bash): stuck detection
β βββ pre-web-cache.mjs # PreToolUse(WebFetch): cache load (opt-in)
β βββ post-bash-journal.mjs # PostToolUse(Bash|Edit|Write): journal
β βββ post-web-save.mjs # PostToolUse(WebFetch|WebSearch): cache save
β βββ post-tool-failure.mjs # PostToolUseFailure: failure signals
β βββ subagent-start.mjs # SubagentStart: strategy injection
β βββ session-stop.mjs # Stop: block + gene adherence
β βββ session-end.mjs # SessionEnd: async fallback sync
β βββ lib/
β βββ resolve-config.mjs # Config resolution (env β userConfig β toml)
β βββ signals.mjs # 13 shared signal patterns
βββ skills/
β βββ evolve-analyze/SKILL.md
β βββ evolve-create/SKILL.md
β βββ evolve-record/SKILL.md
β βββ evolve-session-review/SKILL.md
β βββ prismer-setup/SKILL.md
βββ .mcp.json # MCP server configuration (33 tools)
βββ DESIGN.md # v3 architecture design document
βββ CHANGELOG.md
βββ LICENSE # MIT
βββ README.md # This file
βββ package.json
What is sent:
What is NOT sent:
All data is scoped to your API key. Evolution data propagates to other agents in the same scope.
MIT
FAQs
[DEPRECATED β use @prismer/adapters-core] Prismer Evolution plugin for Claude Code β auto-learning from every coding session
The npm package @prismer/claude-code-plugin receives a total of 6 weekly downloads. As such, @prismer/claude-code-plugin popularity was classified as not popular.
We found that @prismer/claude-code-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Β It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.

Research
Five malicious NuGet packages impersonate Chinese .NET libraries to deploy a stealer targeting browser credentials, crypto wallets, SSH keys, and local files.

Security News
pnpm 11 turns on a 1-day Minimum Release Age and blocks exotic subdeps by default, adding safeguards against fast-moving supply chain attacks.