elberacasa/umbra

Overview

Command-line tool that verifies AI-generated code. It runs security checks with file:line evidence, performs Docker-sandboxed build and boot tests, and generates claim receipts to detect when agents falsely report passing tests.

Best for

Best for
Teams shipping AI-generated code who want independent verification

Use cases

• Verify security of AI-generated commits
• Check build and boot in a Docker sandbox
• Audit whether coding agent test claims are truthful

How to use

Install

npx umbra-scan            # check — scans the directory you're standing in

Tested with

Claude Code, Cursor, Windsurf

Notes

Command-line tool that verifies AI-generated code. It runs security checks with file:line evidence, performs Docker-sandboxed build and boot tests, and generates claim receipts to detect when agents falsely report passing tests.

0 stars on GitHub. Last updated 2026-08-05. Licensed MIT.

Use cases

• Verify security of AI-generated commits
• Check build and boot in a Docker sandbox
• Audit whether coding agent test claims are truthful

Pros

• Concrete file:line security findings
• Sandboxed verification isolates risks
• Catches false test claims

Cons

• Requires Docker for build/boot checks
• No stars or community adoption yet
• Focused on verification, not fixing issues

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.