https://github.com/jx887/homebrew-canaryai

AI coding agents are powerful — but they run real commands on your machine. CanaryAI watches what they do and alerts you when something looks off: reverse shells, credential theft, persistence mechanisms, data exfiltration, and more.

It works by scanning Claude Code session logs in real time, applying a set of detection rules, and surfacing alerts in a native macOS menu bar app.

CanaryAI never blocks or interferes with your agent. It observes and reports.

https://github.com/jx887/homebrew-canaryai