PROMETHEUS is an AI-native development platform that puts security in the critical path. Install and run AI agents (Claude, ChatGPT, Gemini) offline with zero data leaving your machine. 🛡️ **Supply-Chain Security** Every fetched code is scanned by a fail-closed nemesis gate before execution. Detects: droppers, reverse shells, miners, obfuscated payloads, persistence hooks, credential theft, archive threats. HMAC-signed verdicts stored in append-only audit log. 🤖 **Three Surfaces, One Engine** - **Studio**: Hardened Electron desktop IDE with Monaco editor, terminals, Jupyter notebooks, LSP/DAP debugging, security console - **CLI/TUI**: Full feature parity. 140+ slash commands. Headless or interactive. - **MCP Plugin**: Works with Claude Code, Cursor, Gemini, Codex, Windsurf, Zed, Continue, Cline 🧠 **Model Flexibility** - Run Ollama or LM Studio locally (no API keys, no cloud bills) - Support for Claude, ChatGPT, Gemini, GitHub Copilot, DeepSeek, Groq - Real KV-cache arithmetic: refuses models that won't fit, explains why - Remote compute over SSH/LAN for GPU offloading 💸 **Cost Control** - Enforce daily spend caps - Token economy tracking per turn - Context breakdown by component - Prompt caching & terse-output guidance 🔐 **Defense In Depth** - Authorization ladder (A0–A7): from "ask before everything" to autonomous - OS-level sandbox: Seatbelt on macOS, bubblewrap on Linux - Prompt injection defense: structural framing, pattern scanning, canary tripwires - Lifecycle hooks: PreToolUse can block dangerous operations 🧰 **49 Powerful Tools** Read (files, dirs, git, system), Write (deterministic patching), Execute (sandboxed commands), Web (fetch + search), Memory (cross-session notes), Delegation (parallel sub-agents) 📦 **Catalog & Plugins** - Gated install of plugins, skills, models, apps - Self-hosted apps: yt-dlp, ollama, n8n, penpot, bitwarden - Pentest sandbox: authorized security tools, airgapped by default ⚙️ **The Engine** - `prometheus.py`: 868 KB, zero pip dependencies, pure Python stdlib - One bridge file only: engine-bridge is sole authority over security - Open source: Apache-2.0 licensed **What's shipped:** Everything above. All 49 tools working. Studio, CLI, plugin, VS Code ext, all live. **Install:** ```bash curl -fsSL https://github.com/francescopeli... | bash

PROMETHEUS: Safe AI Dev & Scan Security

Run AI agents locally. Every plugin scanned before execution

Run AI agents locally. Every plugin scanned before execution