cli

The CLI's core functionality involves executing arbitrary code bundles and commands sourced from the Smithery registry. This includes spawning child processes, downloading and extracting packages (using `@anthropic-ai/mcpb`), and running them locally. While this is the intended design, it introduces a significant supply chain risk: users must implicitly trust the Smithery registry and the authors of the MCP servers they install. A compromised registry or a malicious server package could lead to arbitrary code execution on the user's machine. Network requests to the registry and for tunnel creation (via ngrok) also present standard network-based attack vectors. API keys are handled, implying sensitive data management.