Enterprise DNAEnterprise DNA
MMCP ServersDeveloperlow

elberacasa/umbra

by Various

The trust score for AI-generated code. One command verifies what your coding agent shipped: security findings with file:line evidence, Docker-sandboxed build/boot checks, and claim

MCP

elberacasa/umbra

Added 16 Sept 2026

#ai#claude-code#cli#code-quality#copilot#cursor#devtools#llm
Catalogue record, not a reviewed recommendation. This record can include automatically collected descriptions and setup details. Confirm important claims with the original source. Explore source-reviewed tools.

Overview

Command-line tool that verifies AI-generated code. It runs security checks with file:line evidence, performs Docker-sandboxed build and boot tests, and generates claim receipts to detect when agents falsely report passing tests.

Best for

Best for
Teams shipping AI-generated code who want independent verification

Use cases

  • Verify security of AI-generated commits
  • Check build and boot in a Docker sandbox
  • Audit whether coding agent test claims are truthful

How to use

Install

npx umbra-scan            # check — scans the directory you're standing in

Clients listed in this record (not verified here)

Claude Code, Cursor, Windsurf

Notes

0 stars on GitHub. Last updated 2026-08-05. Licensed MIT.

Pros

  • Concrete file:line security findings
  • Sandboxed verification isolates risks
  • Catches false test claims

Cons

  • Requires Docker for build/boot checks
  • No stars or community adoption yet
  • Focused on verification, not fixing issues
Free 27-page guide

Get the free Developer’s Field Guide

A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.

Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.

No spam. Unsubscribe any time.