canary-srSafety monitoring and tripwire detection for AI agents. Protects against unauthorized file access, dangerous commands, and excessive activity. Auto-halts on...
Install via ClawdBot CLI:
clawdbot install TheShadowRose/canary-srGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
~/.ssh/id_rsaSends data to undocumented external endpoint (potential exfiltration)
post → https://hooks.slack.com/...Potentially destructive shell commands in tool definitions
rm -rf /Accesses system directories or attempts privilege escalation
/proc/Generated Mar 21, 2026
Developers use Canary to monitor and restrict AI agents during testing and deployment, preventing unauthorized file access and dangerous command execution. It ensures agents operate within defined safety boundaries, reducing risks of data breaches or system damage. The auto-halt feature stops agents automatically upon critical violations, requiring manual review for restart.
Organizations deploy Canary as a tripwire system to detect insider threats or malicious activities by monitoring access to sensitive directories and honeypot files. It logs violations and generates audit reports for compliance and incident response. This helps in early detection of unauthorized snooping or data exfiltration attempts.
Cloud providers integrate Canary to safeguard virtual environments from runaway or compromised AI agents, using rate limiting to prevent excessive resource consumption. It blocks dangerous commands like 'rm -rf /' and monitors file operations in critical paths. This maintains system stability and prevents cascading failures in multi-tenant setups.
Research institutions use Canary to secure experimental AI agents that interact with sensitive datasets or lab equipment, ensuring they do not access protected files or execute harmful commands. The audit trail provides detailed logs for analysis and pattern detection, aiding in safety protocol refinement and regulatory compliance.
DevOps teams incorporate Canary into CI/CD pipelines to monitor automated scripts and agents for safety violations during deployment processes. It checks commands and file accesses in real-time, preventing accidental deletions or security breaches. This enhances reliability and security in automated infrastructure management.
Offer Canary as a free, open-source tool under MIT license, with revenue from paid support, customization, and enterprise consulting services. Businesses can pay for advanced features, priority updates, and dedicated assistance for integration. This model attracts a broad user base while monetizing through value-added services.
Provide Canary as a cloud-based service with managed monitoring, centralized audit trails, and real-time alerts via subscription plans. Users pay monthly or annually based on usage tiers, such as number of agents or data volume. This model offers scalability and ease of use without on-premise setup.
Sell enterprise licenses for on-premise deployment with additional features like advanced analytics, custom integrations, and dedicated support. Target large organizations needing compliance, high security, and tailored configurations. Revenue comes from one-time license fees or annual maintenance contracts.
💬 Integration Tip
Start by copying the config example and customizing protected paths and forbidden patterns to match your environment. Use the CLI for quick checks before integrating the Python API into your agent runtime.
Scored Jun 19, 2026
Calls external URL not in known-safe list
https://ko-fi.com/theshadowroseUses known external API (expected, informational)
slack.comAI Analysis
The skill's stated purpose is security monitoring, but it contains code to send data to an external Slack webhook and a Ko-fi donation link, which are not core to its function and could enable data exfiltration. While the primary logic appears defensive, the presence of undocumented external calls to user-controlled endpoints introduces a significant risk.
Audited Apr 17, 2026 · audit v1.0
Monitora o estado, saúde, logs recentes e uso de CPU/memória dos containers N8N via comandos Docker.
Parse, search, and analyze application logs across formats. Use when debugging from log files, setting up structured logging, analyzing error patterns, correlating events across services, parsing stack traces, or monitoring log output in real time.
Use the Netlify CLI (netlify) to create/link Netlify sites and set up CI/CD (continuous deployment) from GitHub, especially for monorepos (multiple sites in one repo like Hugo sites under sites/<domain>). Use when Avery asks to deploy a new site, connect a repo to Netlify, configure build/publish settings, set environment variables, enable deploy previews, or automate Netlify site creation.
Build, preview, and deploy websites, web apps, and APIs using Vercel, Railway, GitHub Pages, or local Canvas environments.
Chat-based Azure infrastructure assistance using Azure CLI and portal context. Use for querying, auditing, and monitoring Azure resources (VMs, Storage, IAM, Functions, AKS, App Service, Key Vault, Azure Monitor, billing, etc.), and for proposing safe changes with explicit confirmation before any write/destructive action.
ICMP health check for hosts, phones, and daemons