Mmcp.market

SimMirror

by AndrewKochulab·io.github.AndrewKochulab/sim-mirror·v1.2.0
No reviews yet

Mirror and drive the iOS Simulator: token-efficient UI snapshots, gestures and a live viewer.

C66/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C66/100

full report

Adoption
Growing

2 stars279 downloads/wk

Reviews

Write one

Nobody has reviewed SimMirror yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Tools

Tool lists for local packages are only visible after install.

Public scan report

scanner v0.1.3 · 2026-09-19 · same rubric, same numbers if you re-run it

1 high1 medium
  • Code scan184 source files scanned8/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 1 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (2)

  • highWhole environment serialized (possible credential exfil)env.dump
    sim_mirror-1.2.0/src/sim_mirror/cli/context.py: …) -> CliContext: return cls(env=dict(os.environ), cwd=Path.cwd(), stdout=sys.stdout, std…
  • mediumHeavily hex-escaped string (obfuscation)obf.hex-density
    sim_mirror-1.2.0/src/sim_mirror/testing/fakes.py: …r set, then an IDR slice. KEY_FRAME = b"\x00\x00\x00\x01\x67\x64\x00\x28\x00\x00\x00\x01\x68\xee\x3c\x80\x00\x00\x00\x01\x65\x88\x84" class FakeEngine: """A running d…
Overall 66/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Grade history

  • 2026-09-19restoreD → Cscore 66: Whole environment serialized (possible credential exfil); Heavily hex-escaped string (obfuscation)

Install directly

claude mcp add sim-mirror -- uvx sim-mirror
Add to Cursor

Alternatives to SimMirror

Same job, ranked by rating then adoption.

See all →
  • Mindwtr
    Task and project automation for local and self-hosted Mindwtr Cloud data; read-only by default.
    A
  • Obsidian Hybrid Search
    Search Obsidian vaults with hybrid full-text, fuzzy, semantic, and graph retrieval.
    C
  • OrchestKit Docs MCP
    Read-only MCP server for the OrchestKit docs: full-text search + Markdown fetch. No auth.
    A
  • gflow-cli
    Drive Google Flow from an agent: Veo video and Imagen image generation
    A
  • Obsidian Turbocharged
    Model-agnostic, agent-ready Obsidian MCP server with RBAC, SLSA provenance, and native search.
    C
SimMirror vs MindwtrSimMirror vs Obsidian Hybrid SearchSimMirror vs OrchestKit Docs MCP