Skills nature-ref-verifier

📦

nature-ref-verifier

Name: nature-ref-verifier
Author: yuan1z0825

Content revision r1 Medium Risk ⚙️ External commands🌐 Network access

Verify Scholarly References Across Sources

Incorrect citation metadata can undermine manuscripts and delay publication. This skill compares references with authoritative sources and produces evidence-based corrections.

Supports: Claude Codex Code(CC)

⚠️ 50 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "nature-ref-verifier" from https://skillstore.io/skills/yuan1z0825-nature-ref-verifier.md and its manifest at https://skillstore.io/api/skills/yuan1z0825-nature-ref-verifier/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/yuan1z0825-nature-ref-verifier.md Signed manifest GET /api/skills/yuan1z0825-nature-ref-verifier/manifest Signed lockfile GET /api/skills/yuan1z0825-nature-ref-verifier/lockfile

Test it

Using "nature-ref-verifier". Verify a citation whose DOI resolves to a different paper.

Expected outcome:

Needs fix: The DOI points to another title and author list. Replace it only after confirming the publisher record.

Using "nature-ref-verifier". Check a reference with a 2024 online date and a 2025 volume year.

Expected outcome:

Check suggested: The dates describe different publication stages. Use the formal volume year and retain the online date when required.

Using "nature-ref-verifier". Audit a citation that no configured source can locate.

Expected outcome:

Unverifiable: No authoritative record was available. Keep the original entry and add it to the manual review list.

Security Audit

Medium Risk

v2 • 8/18/2026 Open versioned report

The high-entropy and shell-backtick alerts are false positives caused by readable Markdown, code fences, and Chinese text. The skill makes legitimate Crossref requests and recommends Zotero writes, including risky direct database editing.

Files scanned

409

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (2)

Medium

SKILL.md:139

SQLite database file

- 直接改 `zotero.sqlite` 仅在 Zotero 关闭后可行,且需手工维护多表关联与版本号,**仅作最后手段**;

The skill recommends direct modification of zotero.sqlite as a last resort. Even with Zotero closed, manual multi-table edits can corrupt or destroy library data.

Medium

SKILL.md:134-139

Zotero writes lack an explicit confirmation gate

The workflow offers full CRUD and local connector additions without requiring user approval before modifying a Zotero library.

The listed pyzotero and connector paths can change library data, while these instructions contain no mandatory preview or approval step.

Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low

SKILL.md:45

Hardcoded URL

**Step 2.0(最便宜、最先做):DOI 可解析性检查。** 对每条有 DOI 的文献先请求 `https://api.crossref.org/works/<DOI>`:404 → DOI 本

The workflow explicitly requests the public Crossref API with each DOI. This is legitimate, but it sends citation identifiers to an external service.

Risk Factors

⚙️ External commands (17)

SKILL.md:12 SKILL.md:13 SKILL.md:17 SKILL.md:33 SKILL.md:41 SKILL.md:45 SKILL.md:112-130 SKILL.md:130-132 SKILL.md:132-136 SKILL.md:136-138 SKILL.md:138-139 SKILL.md:139-144 SKILL.md:144-176 SKILL.md:176-192 SKILL.md:192-193 SKILL.md:193 SKILL.md:194-195

🌐 Network access (1)

SKILL.md:45

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/yuan1z0825-nature-ref-verifier/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/yuan1z0825-nature-ref-verifier/security.svg)](https://skillstore.io/skills/yuan1z0825-nature-ref-verifier?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/yuan1z0825-nature-ref-verifier?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/yuan1z0825-nature-ref-verifier/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/yuan1z0825-nature-ref-verifier.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

yuan1z0825. (2026). nature-ref-verifier security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/yuan1z0825-nature-ref-verifier/audits/2

BibTeX citation

@techreport{yuan1z0825-yuan1z0825-nature-ref-verifier-2026,
  author = {yuan1z0825},
  title = {nature-ref-verifier security audit report (audit version 2)},
  institution = {Skillstore},
  year = {2026},
  number = {2},
  url = {https://skillstore.io/skills/yuan1z0825-nature-ref-verifier/audits/2},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "nature-ref-verifier security audit report (audit version 2)"
version: "unspecified"
type: report
authors:
  - name: "yuan1z0825"
date-released: "2026-08-18"
url: "https://skillstore.io/skills/yuan1z0825-nature-ref-verifier/audits/2"
identifiers:
  - type: other
    value: "skillstore:yuan1z0825-nature-ref-verifier:audit:2"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Check a manuscript before submission

Audit every bibliography entry and identify corrections supported by authoritative records.

Resolve reviewer citation concerns

Verify disputed references and prepare concise evidence for a revision response.

Clean a reference library

Compare BibTeX or Zotero metadata and prepare reviewed correction instructions.

Try These Prompts

Verify one citation

Verify this citation against authoritative sources. Compare every available field and explain any difference: [citation]

Audit a reference list

Check these references individually. Group results as verified, check suggested, needs fix, or unverifiable. Cite the evidence for each correction: [references]

Review BibTeX metadata

Validate this BibTeX content. Compare authors, title, year, volume, issue, pages, journal, and DOI. Prepare corrections without applying them: [BibTeX]

Investigate conflicting records

Investigate these conflicting records across Crossref, publisher pages, and suitable alternatives. Explain source authority, publication-state changes, uncertainty, and recommended fields: [records]

Best Practices

Provide complete citations and identify the citation style or required output format.
Allow checks against DOI registries, publisher pages, and relevant regional databases.
Review all proposed BibTeX or Zotero changes before applying them.