add-provider-package
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFE
Full Analysis
- Development Workflow Commands: The guide includes standard commands for building, testing, and managing changesets using
pnpm. These operations are consistent with the intended purpose of setting up a development environment for the SDK. - Dependency Management: The skill specifies dependencies such as
@ai-sdk/provider,@ai-sdk/provider-utils, and@vercel/ai-tsconfig, which are part of the vendor's ecosystem, along with standard industry packages likezodandtypescript. - Secure Credential Handling: The implementation pattern recommends using a dedicated utility,
loadApiKey, to retrieve credentials from environment variables rather than hardcoding them, aligning with security best practices. - Trusted External References: The skill references a GitHub repository owned by the vendor for code examples, which is a trusted source for documentation and implementation reference.
Audit Metadata