add-provider-package
Pass
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: SAFE
Full Analysis
- Development Workflow and Automation: The skill outlines a standard development process for extending a software development kit. It involves creating a package structure, configuring build tools like tsup, and using pnpm for task management.- Credential Management: It includes guidance on securely loading API keys from environment variables using a dedicated utility function, which aligns with security best practices for handling sensitive information.- Dependency Integration: The instructions mention various internal and external dependencies, such as @ai-sdk/provider and zod. These are used for defining interfaces and performing data validation.- Defensive Programming Practices: A dedicated security section advises on safe JSON parsing and mandatory validation of external API responses against predefined schemas, helping to mitigate risks from untrusted data sources.
Audit Metadata