A few other scanners exist, but they're built for security experts. $SNIFF is the first anyone can use without knowing what to look for. Paste a link, get a plain-English answer, nothing to install.
Free. About 30 seconds. We read the files and never run them.
Paste a GitHub link, or drop a zip. Coding tests, starter kits, tools from a stranger, anything you're about to run.
Before you install anything or open the folder in VS Code. Both can run code on their own.
Open it in a VM or cloud dev box, even if the scan comes back clean. Never on the laptop with your wallets, and never on a work laptop. That's how Binance lost $6.3 billion.
Who made it, and do they have a real history? A brand-new account or one-commit repo is a bad sign. So is anyone rushing you to run it.
Every file read as plain text. Nothing installed, nothing opened, nothing run.