github analyzed 407ac3b

smithery-ai/cli

Drift inferred · capture-to-capture

capabilities 0 tools

transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 407ac3b · analyzer v18 · 9h ago

dynamic code executionnew Function()smithery-ai-cli-407ac3b/src/utils/run/prepare-stdio-connection.ts:95const stdioFn = new Function(
credential in logscredential in logsmithery-ai-cli-407ac3b/src/index.ts:485console.log(`SMITHERY_API_KEY=${apiKey}`)

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

fs smithery-ai-cli-407ac3b/build.mjs :1 import { existsSync, mkdirSync, readFileSync } from "node:fs"
fs smithery-ai-cli-407ac3b/src/commands/homepage.ts :9 } from "node:fs"
fs smithery-ai-cli-407ac3b/src/commands/mcp/deploy.ts :2 import { createReadStream, writeFileSync } from "node:fs"
fs smithery-ai-cli-407ac3b/src/commands/mcp/source.ts :1 import { readFile, realpath, stat } from "node:fs/promises"
fs smithery-ai-cli-407ac3b/src/index.ts :3 import { realpathSync } from "node:fs"
fs smithery-ai-cli-407ac3b/src/lib/client-config-io.ts :2 import fs from "node:fs"
fs smithery-ai-cli-407ac3b/src/lib/config-loader.ts :1 import { existsSync, readFileSync } from "node:fs"
fs smithery-ai-cli-407ac3b/src/lib/dev-server.ts :1 import { readFile } from "node:fs/promises"
fs smithery-ai-cli-407ac3b/src/lib/lazy-import.ts :2 import { existsSync } from "node:fs"
fs smithery-ai-cli-407ac3b/src/lib/mcpb.ts :1 import * as fs from "node:fs"
fs smithery-ai-cli-407ac3b/src/utils/cli-utils.ts :1 import { existsSync, readFileSync } from "node:fs"
fs smithery-ai-cli-407ac3b/src/utils/smithery-settings.ts :1 import { promises as fs } from "node:fs"
fs smithery-ai-cli-407ac3b/src/utils/tool-schema-cache.ts :1 import { promises as fs } from "node:fs"

shell smithery-ai-cli-407ac3b/src/commands/homepage.ts :1 import { execSync, spawn } from "node:child_process"
shell smithery-ai-cli-407ac3b/src/commands/mcp/add-flow.ts :1 import { execFile } from "node:child_process"
shell smithery-ai-cli-407ac3b/src/commands/mcp/deploy.ts :1 import { spawn } from "node:child_process"
shell smithery-ai-cli-407ac3b/src/lib/cli-auth.ts :1 import { exec } from "node:child_process"
shell smithery-ai-cli-407ac3b/src/lib/client-config-io.ts :1 import { execFileSync } from "node:child_process"
shell smithery-ai-cli-407ac3b/src/lib/lazy-import.ts :1 import { execFile } from "node:child_process"
shell smithery-ai-cli-407ac3b/src/lib/skill-install.ts :85 const { execSync } = await import("node:child_process")
shell smithery-ai-cli-407ac3b/src/lib/uplink.ts :1 import { spawn } from "node:child_process"
shell smithery-ai-cli-407ac3b/src/utils/client.ts :1 import { exec } from "node:child_process"
shell smithery-ai-cli-407ac3b/src/utils/runtime.ts :1 import { exec } from "node:child_process"

net smithery-ai-cli-407ac3b/src/commands/homepage.ts :166 const res = await fetch(`http://127.0.0.1:${port}`, {
net smithery-ai-cli-407ac3b/src/commands/mcp/api.ts :198 const response = await fetch(dynamicMcpUrl(this.namespace, connectionId), {
net smithery-ai-cli-407ac3b/src/commands/mcp/uplink-target.ts :2 import { isIP } from "node:net"
net smithery-ai-cli-407ac3b/src/commands/run/stdio-runner.ts :74 await fetch(ANALYTICS_ENDPOINT, {
net smithery-ai-cli-407ac3b/src/lib/cli-auth.ts :114 const response = await fetch(sessionUrl, {
net smithery-ai-cli-407ac3b/src/lib/mcpb.ts :67 return fetch(bundleUrl)
net smithery-ai-cli-407ac3b/src/lib/registry.ts :63 await fetch(ANALYTICS_ENDPOINT, {
net smithery-ai-cli-407ac3b/src/runtime/shttp-bootstrap.ts :17 fetch(request: Request): Promise<Response>
net smithery-ai-cli-407ac3b/src/utils/analytics.ts :180 await fetch(ANALYTICS_ENDPOINT, {

secrets smithery-ai-cli-407ac3b/src/lib/registry.ts :53 const apiKey = process.env.SMITHERY_API_KEY
secrets smithery-ai-cli-407ac3b/src/utils/smithery-settings.ts :231 if (process.env.SMITHERY_API_KEY) {

postinstall smithery-ai-cli-407ac3b/package.json :14 node scripts/postinstall.js