add-provider — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited add-provider (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Generate DeepChat provider integration changes against the current provider architecture. Keep provider display data in PublicProviderConf, map runtime behavior to known transports, and use a special provider implementation only when the API behavior requires one.
Collect or derive these before editing source:
reasoning support, image/audio/embedding endpoints, or proxy requirements.
Use this when the provider supports OpenAI Chat Completions or Responses-compatible HTTP APIs.
Typical files:
src/main/provider/defaults.tssrc/main/provider/providerId.tssrc/main/provider/providerRegistry.ts for runtime strategies and derived public catalog membershiptest/main/** provider registry or creation testsUse this when the provider maps to an existing DeepChat transport such as Anthropic, Gemini, Vertex, Azure, Bedrock, Ollama, or ACP.
Typical files:
src/main/provider/defaults.tssrc/main/provider/providerRegistry.tsUse this when auth, request shape, streaming, discovery, or error handling differs from existing transports.
Typical files:
src/main/provider/providers/<providerName>Provider.tssrc/main/provider/<providerName>Adapter.tssrc/main/provider/managers/providerInstanceManager.tssrc/shared/contracts/routes/* and src/renderer/api/*Client.ts for interactive authsrc/renderer/settings/components/* for provider-specific settings UIProviderRuntimeDefinition, generated runtime manifests, or runtime package-nameinference.
docs/features/provider-runtime/spec.md when the provider work touches the provider runtimescope. Also read plan.md if it exists for an active provider-runtime goal. Treat any legacy tasks.md as migration input rather than another execution tracker.
src/main/provider/defaults.tssrc/main/provider/providerId.tssrc/main/provider/providerRegistry.tssrc/main/provider/aiSdk/providerFactory.tssrc/main/provider/managers/providerInstanceManager.tssrc/renderer/settings/components/ProviderApiConfig.vueregression coverage; add only the smallest contract-level tests warranted.
plan.md as coherent implementation slices land, when one exists. For alegacy tasks.md, merge remaining work into the existing plan; without one, keep a single-slice complex bug checklist in spec.md and create plan.md for feature, architecture, or multi-slice bug work. Do not update or recreate the task file.
pnpm run format
pnpm run i18n
pnpm run lint
pnpm run typecheckRun focused main/renderer tests for any touched provider code.
Report:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.