sonomoshq

sonomoshq/Canary

Plugin Claude Code

Plugin marketplace listing 1 plugin: canary.

sonomoshq/Canary

Plugin Claude Code

Sonomos Canary — persistent PII leak counter for Claude Code. 38 checksum-validated regex detectors (plus your own via rules.d) and Claude self-scan catch sensitive data you expose to AI, Canary Tokens give a CERTAIN alarm the instant a planted decoy secret reaches Claude, and Canary Wrapped turns your exposure…

sonomoshq/Canary

Agent

Use when the user wants a full privacy audit across ALL stored Claude Code transcripts (not just the current session), a compliance report, or the total PII exposure across every project.

sonomoshq/Canary

Hook

Runs when the agent finishes a response, executing scan.sh via bash. From sonomoshq/Canary.

sonomoshq/Canary

Hook

Runs after a tool call finishes for Write, Edit and NotebookEdit tool calls, executing scan-file.sh via bash. From sonomoshq/Canary.

sonomoshq/Canary

Hook

Runs when a session starts, executing session-start.sh via bash. From sonomoshq/Canary.

sonomoshq/Canary

Skill Claude CodeCodex

Use when the user wants to check installed Claude Code plugins, skills, agents, or MCP configs for leaked secrets or suspicious/exfiltration patterns.

sonomoshq/Canary

Skill Claude CodeCodex

Use when the user asks what PII they've leaked, wants the exposure dashboard/stats, or wants to reset the counter.

sonomoshq/Canary

Skill Claude CodeCodex

Use when the user worries they pasted a secret, asks "did I leak anything?", or wants a full-history privacy audit — the automatic scan only covers the latest message.

sonomoshq/Canary

Skill Claude CodeCodex

Use when the user wants to plant a decoy/tripwire secret, create a canary token, or check whether a planted token has been leaked to Claude.

sonomoshq/Canary

Skill Claude CodeCodex

Use when the user wants a shareable Canary Wrapped / year-in-review / recap of the sensitive data they've exposed, or asks to see or share their stats as a card.