add-provider

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides templates for building 'Usage Probes' that execute system commands such as ps and lsof. This functionality is documented as the intended mechanism for detecting local AI provider processes and discovering ports for communication with local APIs.
  • [EXTERNAL_DOWNLOADS]: The documentation mentions installing librsvg via Homebrew (brew install librsvg) to facilitate icon generation. This is a standard development tool and is presented as a manual setup step for the developer.
  • [DATA_EXPOSURE]: While the skill describes methods for saving and retrieving provider tokens (save{Provider}Token), these are provided as abstract protocol templates within the application's internal architecture (ProviderSettingsRepository). No actual credentials, secrets, or sensitive file paths are exposed or mishandled.
  • [CODE_PATTERNS]: The skill follows established software engineering principles such as Test-Driven Development (TDD) and the Interface Segregation Principle (ISP). It uses standard Swift libraries (Foundation, URLSession) and internal project abstractions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 12:16 PM
Security Audit — agent-trust-hub — add-provider