← Back to search

GhostQA

SyncTek-LLC Scanned 1d ago

AI personas navigate your web app in real browsers, find bugs and UX issues. No scripts needed.

C
70.5 / 100

Versions

0.2.2latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 5

specterqa_run
annotations: none low

Run behavioral tests against a product. Args: product: Product name (must match a YAML file in .specterqa/products/). journey: Specific journey/scenario ID to run. Omit to run all journeys. level: Test level -- "smoke" (quick, 1 scenario), "standard" (all), or "thorough" (all + extra coverage). budget: Maximum spend for this run in USD. Default: $5.00. headless: Run browser in headless mode. Default: true. directory: Working directory to search for .specterqa/ project. Defaults to the server's working directory. Returns: JSON string with run results including pass/fail, findings, and cost.

level str budget float journey string product str headless bool directory string
specterqa_list_products
annotations: none low

List available products and their journeys. Args: directory: Working directory to search for .specterqa/ project. Defaults to the server's working directory. Returns: JSON array of products with their journeys.

directory string
specterqa_get_results
annotations: none low

Get results from a previous SpecterQA run. Args: run_id: The run ID (e.g., "GQA-RUN-20260222-143052-a1b2"). directory: Working directory to search for .specterqa/ project. Defaults to the server's working directory. Returns: JSON string with the full run result, or an error.

run_id str directory string
specterqa_init
annotations: none low

Initialize a SpecterQA project. Args: directory: Parent directory for .specterqa/ project. Default: current directory. url: Optional base URL for the product. If provided, the sample product config will be updated with this URL. Returns: JSON with success status and list of created files.

url string directory str
specterqa_budget_check
annotations: none low

Check cumulative budget status without running tests. Args: directory: Working directory to search for .specterqa/ project. Defaults to the server's working directory. per_day_usd: Daily spend limit in USD. 0.0 means no limit. per_month_usd: Monthly spend limit in USD. 0.0 means no limit. Returns: JSON string with current budget status including daily/monthly spend, limits, and whether a run can proceed.

directory string per_day_usd float per_month_usd float

Permissions 4

network medium
Server uses network capabilities via: http, requests, socket, urllib
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib, shutil
shell high
Server uses shell capabilities via: subprocess
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 39

low
Tool 'specterqa_run' has no annotations annotation_checker · 100%
low
Tool 'specterqa_list_products' has no annotations annotation_checker · 100%
low
Tool 'specterqa_get_results' has no annotations annotation_checker · 100%
low
Tool 'specterqa_init' has no annotations annotation_checker · 100%
low
Tool 'specterqa_budget_check' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: jinja2@3.1.0 (GHSA-cpwx-vrp4-4pq7) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.0 (GHSA-gmj6-6f8f-6699) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.0 (GHSA-h5c8-rqwp-cp95) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.0 (GHSA-h75v-3vvj-5mfj) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.0 (GHSA-q2x7-8rv6-6q7h) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.0 (PYSEC-2026-1471) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.0 (PYSEC-2026-1472) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.0 (PYSEC-2026-1473) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.0 (PYSEC-2026-1474) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.0 (PYSEC-2026-1475) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (PYSEC-2026-2270) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (GHSA-9hjg-9r4m-mvj7) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (GHSA-9wx4-h78v-vm56) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (GHSA-gc5v-m9x4-r6x2) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (PYSEC-2026-1872) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (PYSEC-2026-1873) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (PYSEC-2026-2275) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: specterqa_run manifest_parser · 90%
info
Tool: specterqa_list_products manifest_parser · 90%
info
Tool: specterqa_get_results manifest_parser · 90%
info
Tool: specterqa_init manifest_parser · 90%
info
Tool: specterqa_budget_check manifest_parser · 90%
info
Required env vars (5) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 1 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%