Add immunity-agent to runtime protection section

[Ar9av]

hey, wanted to suggest adding immunity-agent by PrismorSec to the runtime protection section.

its a hook-based policy engine for AI coding agents: dangerous command blocking, secret cloaking, supply chain vetting, and an updatable signed threat feed. enforce/warn/audit modes. tested against Claude Code, Cursor, Codex, OpenHands and Windsurf.

fits the runtime security category well since it works at the tool-call level regardless of which agent triggers it

[Ar9av]

Worth adding.

Most lists in this space skew toward scanners, benchmarks, or model-layer defenses. Immunity Agent fits a different slot. It sits at runtime, intercepts tool use, and handles the ugly practical stuff like secret exposure, package installs, and policy enforcement while the agent is working.

That makes it easier to place for someone scanning the list for actual controls instead of theory.