Is add-provider safe to install?

SaferSkills independently audited add-provider (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

.claude/skills/add-provider/SKILL.md · 1 file

.claude/skills/add-provider/SKILL.md1.8 KB · Markdown

name: add-provider

description: Add a new park reservation system (a province or camping operator) to Camp, Eh?. Use when wiring up a new data source like another province or booking platform.

Add a reservation provider

Providers implement the Provider interface (src/providers/types.ts): { prefix, jurisdiction, list(), availability(), vacancies(), info() }, and are registered in src/providers/registry.ts (PROVIDERS). Park ids are provider-prefixed (ab:, sk:, bc:, pc:); route() dispatches by prefix. Two platforms already exist to copy:

Aspira / ReserveAmerica — HTML scrape behind a Queue-it gate. src/parks/service.ts

createAspiraProvider(config); configs (base host + contract code) in src/parks/client.ts (ALBERTA, SASKATCHEWAN). Multi-campground parks auto-split into :cg: children.

Camis / GoingToCamp — clean anonymous JSON API. src/providers/camis.ts

new CamisProvider(prefix, jurisdiction, host). Backcountry is detected from resourceCategory names.

Steps

Choose a unique 2-letter prefix and a jurisdiction display name.
Instantiate/implement the provider and add it to PROVIDERS in registry.ts.
Add the jurisdiction color in src/landing.ts COLOR + the legend Source row, and in

src/dashboard.ts SRC.

Coordinates: live API coords win; bake fallbacks into src/data/coords.json keyed by the

prefixed id (geocode if needed — see the geocode-campgrounds skill).

Update provider-listing copy: welcome text + About legend in src/landing.ts, and the MCP

description / INSTRUCTIONS in src/server.ts.

bunx tsc --noEmit + bun test, then deploy (see the deploy skill).

The harvester picks up new parents automatically via harvestTargets(); the catalogue (listCampgrounds()) expands multi-campground parks at serve time.

add-provider— agent skill

Is add-provider safe to install?

Add a reservation provider

Steps

Audit the pieces. Scan the whole. Decide.