Skills nature-citation
📦
nature-citation
v2.0.0 Content revision r1 Medium Risk ⚙️ External commands🌐 Network access📁 Filesystem access⚡ Contains scripts
Find Nature/CNS Citations for Manuscripts
Researchers need defensible citations that match each manuscript claim and journal scope. This skill segments text, searches Nature/CNS-family metadata, and exports reference-manager files.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "nature-citation" from https://skillstore.io/skills/yuan1z0825-nature-citation.md and its manifest at https://skillstore.io/api/skills/yuan1z0825-nature-citation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "nature-citation". A paragraph about immune evasion in pancreatic cancer needing CNS citations.
Expected outcome:
The skill returns segment IDs, candidate papers, support grades, insertion suggestions, and one ENW reference file.
Using "nature-citation". A Chinese request for Nature-series citations with manual download choices.
Expected outcome:
The skill provides Chinese review notes, an HTML browser, year filters, and downloadable ENW, RIS, or Zotero RDF records.
Using "nature-citation". A DOI list already approved by the author.
Expected outcome:
The skill screens metadata, avoids invented fields, and exports a clean reference-manager file.
Security Audit
Medium Riskv5 • 7/8/2026 Open versioned report
Most static findings are false positives from Markdown code spans, CSS, citation keys, Unicode matching, or RDF namespace examples. Confirmed risks are limited to expected outbound Crossref requests, predictable temporary output paths, and one generated HTML innerHTML insertion that can expose users to metadata-based XSS.
12
Files scanned
2,648
Lines analyzed
8
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
Unpublished Manuscript Text Sent to External API
The Crossref search path builds query.bibliographic from manuscript segments or claims and sends it to https://api.crossref.org/works. This is the intended citation workflow, but it can disclose unpublished research text without an explicit consent step.
The script explicitly maps user-derived query text into Crossref request parameters. The behavior is legitimate, but the privacy implication is clear from the code and workflow documentation.
Capability review items (8)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Temp directory access
--outdir /tmp/nature-citation \
The usage example writes citation outputs to /tmp/nature-citation. This is functional, but shared temporary directories can expose unpublished manuscript metadata on multi-user systems.
Medium
innerHTML assignment (XSS risk)
wrapper.innerHTML = `<h4>${{item.title}}</h4><p>${{item.journal}} · ${{item.year || 'n.d.'}}</p>`;
Crossref-derived title, journal, and year values are inserted with innerHTML in the generated browser. Malicious or malformed metadata could execute script when the local HTML is opened.
Medium
Temp directory access
--outdir /tmp/nature-citation \
The workflow recommends writing outputs under /tmp/nature-citation. Predictable temporary output paths can expose manuscript-related files or collide with prior runs.
Low
Python HTTP libraries
- `--sleep 0.3`: seconds between Crossref requests. Default is 0.3; raise to 1.0 if rate-limited.
This documentation describes repeated Crossref requests and rate limiting. The network access is expected, but manuscript-derived queries are sent to an external service.
Low
Python HTTP libraries
from urllib.request import Request, urlopen
The imported urlopen and Request APIs are used for live Crossref lookups. This is expected behavior, but it sends user-derived search terms outside the local environment.
Low
Python HTTP libraries
parser.add_argument("--max-retries", type=int, default=2, help="Maximum retry count for Crossref req
The retry option supports repeated external Crossref requests. It is legitimate citation tooling, but still confirms network behavior that can disclose search text.
Low
Python HTTP libraries
parser.add_argument("--sleep", type=float, default=0.3, help="Seconds between Crossref requests.")
The sleep option controls pacing between Crossref requests. It is expected, but confirms the script performs outbound network calls with user-derived queries.
Low
Hardcoded URL
CROSSREF_API = "https://api.crossref.org/works"
The script hardcodes https://api.crossref.org/works as its metadata endpoint. This is a legitimate source, but all live searches disclose query terms to Crossref.
Risk Factors
⚙️ External commands (28)
references/ris-endnote.md:43-45 scripts/nature_citation.py:4 scripts/nature_citation.py:1139 scripts/nature_citation.py:1143 scripts/nature_citation.py:1152 scripts/nature_citation.py:1170 scripts/nature_citation.py:1171 scripts/nature_citation.py:1796 scripts/nature_citation.py:1797 scripts/nature_citation.py:1798 scripts/nature_citation.py:1831 scripts/nature_citation.py:1864 SKILL.md:23 SKILL.md:24 SKILL.md:34 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:44 SKILL.md:45 SKILL.md:46 SKILL.md:52 SKILL.md:58 SKILL.md:60 SKILL.md:61 SKILL.md:62 SKILL.md:63 SKILL.md:70
🌐 Network access (13)
references/ris-endnote.md:58 references/script-usage.md:33 scripts/nature_citation.py:23 scripts/nature_citation.py:1940 scripts/nature_citation.py:1944 scripts/nature_citation.py:28 scripts/nature_citation.py:34 scripts/nature_citation.py:35 scripts/nature_citation.py:36 scripts/nature_citation.py:37 scripts/nature_citation.py:38 scripts/nature_citation.py:39 scripts/nature_citation.py:197
📁 Filesystem access (2)
⚡ Contains scripts (2)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/yuan1z0825-nature-citation/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/yuan1z0825-nature-citation?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/yuan1z0825-nature-citation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/yuan1z0825-nature-citation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/yuan1z0825-nature-citation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
Yuan1z skill, refactored into static/dynamic layers. (2026). nature-citation security audit report (audit version 5) [Author version 2.0.0]. Skillstore. https://skillstore.io/skills/yuan1z0825-nature-citation/audits/5BibTeX citation
@techreport{yuan1z-skill-refactored-into-static-dynamic-layers-yuan1z0825-nature-citation-2026,
author = {Yuan1z skill, refactored into static/dynamic layers},
title = {nature-citation security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/yuan1z0825-nature-citation/audits/5},
note = {Author version 2.0.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "nature-citation security audit report (audit version 5)"
version: "2.0.0"
type: report
authors:
- name: "Yuan1z skill, refactored into static/dynamic layers"
date-released: "2026-07-08"
url: "https://skillstore.io/skills/yuan1z0825-nature-citation/audits/5"
identifiers:
- type: other
value: "skillstore:yuan1z0825-nature-citation:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 82
Architecture
100
Maintainability
85
Content
67
Community
91
Spec Compliance
What You Can Build
Add Citations to a Manuscript Section
Map each citable sentence to scoped candidate papers and export selected references.
Prepare Reference Manager Imports
Create ENW, RIS, or Zotero RDF files from verified candidate records.
Screen Claims Against CNS Scope
Check whether claims have support within Nature, Science, Cell, or sister journals.
Try These Prompts
Find Basic Citation Candidates
Find Nature/CNS citation candidates for this paragraph and export an ENW file: [paste text].
Limit Scope and Years
Use Nature Portfolio journals only, from 2018 to 2026. Segment this text and return candidate citations: [paste text].
Create a Review Browser
Generate the HTML review browser and RIS export for these claims. Let me filter by year and choose references: [paste claims].
Process a Long Manuscript
Batch this long manuscript by section, keep a segment-reference map, flag weak support, and export Zotero RDF: [paste text].
Best Practices
- State journal scope and year limits before searching.
- Check abstracts or publisher pages before treating candidates as support.
- Use the HTML review browser for long or ambiguous manuscripts.
Avoid
- Do not cite metadata-only candidates as confirmed support.
- Do not broaden beyond Nature/CNS scope without user approval.
- Do not send confidential manuscript text to live search without consent.
Frequently Asked Questions
Does this skill verify that a paper supports my exact claim?
It provides conservative support notes, but users must check abstracts or full text before final citation use.
Which reference formats are supported?
The script can export ENW, RIS, and Zotero RDF files.
Can it handle Chinese requests?
Yes. It can accept Chinese prompts and return Chinese notes while searching with English scientific terms.
Does it require internet access?
Live candidate search uses Crossref, so internet access is required unless you provide known DOI records.
Can I restrict results to flagship journals only?
Yes. The workflow supports a flagship scope for Nature, Science, and Cell only.
Is it safe for unpublished manuscripts?
Use caution. Live searches send query text externally, so confidential material should use DOI-only or redacted workflows.