io.github.Aboudjem/sniff

MCPcommunity
v0.7.1io.github.AboudjemUnknownUpdated 1mo agoGitHub

QA + a11y scanner: walks your running app's real user flows and reports what's broken.

Point it at your running app. It walks your real user flows in a real browser and tells you what's actually broken, with proof. headless browser walk -> findings with proof" src=" width="100%"> Sniff is an autonomous QA scanner. You point it at a running web app and it walks your app's real user flows in a real (headless) browser (clicking buttons, filling forms, following links) and reports…

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
1mo agoLast update
Package
Authorio.github.Aboudjem
LicenseUnknown
Version0.7.1
Sourcemcp-registry
GitHubAboudjem/sniff
Trust Status
B
60/100Good
✓Listed in Forge index+10/10
—Publisher identity verified+0/25
→ Publisher: run `forge publish` from the package repo to claim ownership
—Ed25519 publish signature+0/10
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
—CVE scan · not run+0/30
→ Not yet scanned — package must be on npm
✓Static analysis · clean+20/20
—npm provenance (Sigstore)+0/5
→ Publish from GitHub Actions with the --provenance flag
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
DependenciesNot audited
Tool surface6 tools · none privileged
Security scan✓ CleanvHEAD · 19d ago
EvalsNone
IndexedJun 13, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.

About

Point it at your running app. It walks your real user flows in a real browser and tells you what's actually broken, with proof. headless browser walk -> findings with proof" src=" width="100%"> Sniff is an autonomous QA scanner. You point it at a running web app and it walks your app's real user flows in a real (headless) browser (clicking buttons, filling forms, following links) and reports what's actually broken. It is not a linter and not a static scanner. It opens your pages, interacts with…

Keywords
mcp