smithery-manifest
Automatically generates submission documents for Smithery and MCP Registry, streamlining the listing process for Aeon.
Install this skill
Security score
The smithery-manifest skill was audited on May 30, 2026 and we found 19 security issues across 3 threat categories, including 3 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 8 | > **${var}** — Optional. Set to `--dry-run` to regenerate the manifests but skip the notification (useful for checking diffs locally). Default: regenerate + notify if anything changed. |
Template literal with variable interpolation in command context
| 33 | ```json |
Template literal with variable interpolation in command context
| 124 | ```markdown |
Template literal with variable interpolation in command context
| 200 | - If `${var}` contains `--dry-run`: write the files, log `SMITHERY_MANIFEST_DRY_RUN: <N> files changed`, skip the notification. |
Template literal with variable interpolation in command context
| 205 | ```bash |
Template literal with variable interpolation in command context
| 219 | - \`docs/smithery-manifest.json\` — server.json compatible with the MCP Registry schema; tool list is the full \`skills.json\` catalog (${count} tools). |
Template literal with variable interpolation in command context
| 239 | ``` |
Template literal with variable interpolation in command context
| 244 | The submission docs for Smithery.ai and the MCP Registry are now up to date with the current skill catalog. Apr-22 #1 (highest-priority growth unbuilt for 6 weeks) is now a copy-paste task: open https |
Template literal with variable interpolation in command context
| 252 | ### 8. Log to `memory/logs/${today}.md` |
Template literal with variable interpolation in command context
| 254 | ``` |
Access to .env file
| 106 | env: process.env |
Access to .env file
| 118 | - `env: process.env` is required so the spawned `claude` CLI inherits `ANTHROPIC_API_KEY` / `CLAUDE_CODE_OAUTH_TOKEN` from Claude Desktop's environment. |
External URL reference
| 31 | Format: a server.json document compatible with the [MCP Registry schema](https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json) — Smithery accepts the same shape and supplements |
External URL reference
| 35 | "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json", |
External URL reference
| 49 | "registryBaseUrl": "https://registry.npmjs.org", |
External URL reference
| 84 | # Smithery configuration — https://smithery.ai/docs/config#smitheryyaml |
External URL reference
| 132 | | Smithery | https://smithery.ai/server/new | `docs/smithery.yaml` (this repo) | |
External URL reference
| 227 | Open https://smithery.ai/server/new and submit \`docs/smithery.yaml\`. For the MCP Registry, open a PR at modelcontextprotocol/registry adding \`servers/io.github.aaronjmars/aeon-mcp.json\` (use the c |
External URL reference
| 244 | The submission docs for Smithery.ai and the MCP Registry are now up to date with the current skill catalog. Apr-22 #1 (highest-priority growth unbuilt for 6 weeks) is now a copy-paste task: open https |