AI coding agents are powerful — but they run real commands on your machine. CanaryAI watches what they do and alerts you when something looks off: reverse shells, credential theft, persistence mechanisms, data exfiltration, and more.
It works by scanning Claude Code session logs in real time, applying a set of detection rules, and surfacing alerts in a native macOS menu bar app.
CanaryAI never blocks or interferes with your agent. It observes and reports.
It works by scanning Claude Code session logs in real time, applying a set of detection rules, and surfacing alerts in a native macOS menu bar app.
CanaryAI never blocks or interferes with your agent. It observes and reports.
https://github.com/jx887/homebrew-canaryai