add-provider — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited add-provider (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Generate DeepChat provider integration changes against the current provider architecture. Keep provider display data in PublicProviderConf, map runtime behavior to known transports, and use a special provider implementation only when the API behavior requires one.
Collect or derive these before editing source:
reasoning support, image/audio/embedding endpoints, or proxy requirements.
Use this when the provider supports OpenAI Chat Completions or Responses-compatible HTTP APIs.
Typical files:
src/main/presenter/configPresenter/providers.tssrc/main/presenter/configPresenter/providerId.tssrc/main/presenter/llmProviderPresenter/providerRegistry.tssrc/shared/providerDbCatalog.ts when models come from the public provider databasetest/main/** provider registry or creation testsUse this when the provider maps to an existing DeepChat transport such as Anthropic, Gemini, Vertex, Azure, Bedrock, Ollama, or ACP.
Typical files:
src/main/presenter/configPresenter/providers.tssrc/main/presenter/llmProviderPresenter/providerRegistry.tsUse this when auth, request shape, streaming, discovery, or error handling differs from existing transports.
Typical files:
src/main/presenter/llmProviderPresenter/providers/<providerName>Provider.tssrc/main/presenter/llmProviderPresenter/<providerName>Adapter.tssrc/main/presenter/llmProviderPresenter/managers/providerInstanceManager.tssrc/shared/contracts/routes/* and src/renderer/api/*Client.ts for interactive authsrc/renderer/settings/components/* for provider-specific settings UIProviderRuntimeDefinition, generated runtime manifests, or runtime package-nameinference.
docs/features/provider-runtime/spec.md, plan.md, and tasks.md when the provider worktouches the provider runtime scope.
src/main/presenter/configPresenter/providers.tssrc/main/presenter/configPresenter/providerId.tssrc/main/presenter/llmProviderPresenter/providerRegistry.tssrc/main/presenter/llmProviderPresenter/aiSdk/providerFactory.tssrc/main/presenter/llmProviderPresenter/managers/providerInstanceManager.tssrc/renderer/settings/components/ProviderApiConfig.vuetasks.md entries as the work lands.pnpm run format
pnpm run i18n
pnpm run lintRun focused main/renderer tests for any touched provider code.
Report:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.