Atlas / Skills / brycewang-stanford / Citation

CitationBLOCK

skills/brycewang-stanford/citation

🔬 A curated collection of 23,000+ agent skills for empirical research across 8 social science disciplines. | 精选 23,000+ AI Agent 技能库,覆盖8大社会科学学科的实证研究。CoPaper.AI 20分钟完成一篇可复现的规范实证论文,并支持用户上传 Skills。-- Maintained by CoPaper.AI from Stanford REAP.

Verdict
BLOCK
Grade
D
Trust score
69 /100
Version
1.0.0
Hosts
3 documented
License
NOASSERTION
Stars
4,535
01

Overview

🔬 A curated collection of 23,000+ agent skills for empirical research across 8 social science disciplines. | 精选 23,000+ AI Agent 技能库,覆盖8大社会科学学科的实证研究。CoPaper.AI 20分钟完成一篇可复现的规范实证论文,并支持用户上传 Skills。-- Maintained by CoPaper.AI from Stanford REAP.

Read from source at commit e1ba289846fdOBSERVED · 2026-10-08
02

Install

Commands as the repository documents them. They are shown, not run.

pip install onecite
pip install papis
pip install papis-zotero
git clone https://github.com/54yyyu/zotero-mcp.git
npm install
03

Host compatibility

What the documentation claims. We have not run a compatibility test.

HostStatusNotes
claude-codementioned
claude-desktopmentioned
openclawmentioned
04

What it tells the agent

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: citation-skills
description: "22 citation management skills. Trigger: managing references, formatting citations, BibTeX, bibliographies. Design: reference manager integrations and citation style guides (APA, IEEE, etc.)."
---

# Citation Management — 22 Skills

Select the skill matching the user's need, then `read` its SKILL.md.

| Skill | Description |
|-------|-------------|
| [academic-citation-manager](./academic-citation-manager/SKILL.md) | Manage academic citations across BibTeX, APA, MLA, and Chicago formats |
| [bibtex-management-guide](./bibtex-management-guide/SKILL.md) | Clean, format, deduplicate, and manage BibTeX bibliography files for LaTeX |
| [citation-assistant-skill](./citation-assistant-skill/SKILL.md) | Claude Code skill for citation workflow via OpenAlex and CrossRef |
| [citation-style-guide](./citation-style-guide/SKILL.md) | APA, MLA, Chicago citation format guide with CSL configuration |
| [jabref-reference-guide](./jabref-reference-guide/SKILL.md) | Guide to JabRef open-source BibTeX and BibLaTeX reference manager |
| [jasminum-zotero-guide](./jasminum-zotero-guide/SKILL.md) | Guide to Jasminum for retrieving CNKI Chinese academic metadata in Zotero |
| [mendeley-api](./mendeley-api/SKILL.md) | Manage references and search Mendeley's catalog via REST API |
| [obsidian-citation-guide](./obsidian-citation-guide/SKILL.md) | Citation plugin for Obsidian note-taking with BibTeX support |
| [obsidian-zotero-guide](./obsidian-zotero-guide/SKILL.md) | Insert citations and notes from Zotero into Obsidian knowledge bases |
| [onecite-reference-guide](./onecite-reference-guide/SKILL.md) | AI toolkit to parse, complete, and format academic references |
| [papersgpt-zotero-guide](./papersgpt-zotero-guide/SKILL.md) | AI plugin for Zotero with ChatGPT, Claude, and DeepSeek support |
| [papis-cli-guide](./papis-cli-guide/SKILL.md) | Guide to Papis command-line document and bibliography manager for researchers |
| [reference-manager-comparison](./reference-manager-comparison/SKILL.md) | Compare Zotero, Mendeley, EndNote, and Paperpile for research use |
| [zotero-api](./zotero-api/SKILL.md) | Reference management library and collections API |
| [zotero-better-bibtex-guide](./zotero-better-bibtex-guide/SKILL.md) | Guide to Better BibTeX for Zotero for LaTeX and BibTeX workflows |
| [zotero-better-notes-guide](./zotero-better-notes-guide/SKILL.md) | Guide to Zotero Better Notes for comprehensive note-taking in research |
| [zotero-gpt-guide](./zotero-gpt-guide/SKILL.md) | Guide to Zotero GPT for AI-powered research assistance within Zotero |
| [zotero-mcp-guide](./zotero-mcp-guide/SKILL.md) | Guide to Zotero MCP for connecting Zotero library with AI assistants |
| [zotero-mdnotes-guide](./zotero-mdnotes-guide/SKILL.md) | Export Zotero items and annotations to Markdown note files |
| [zotero-reference-guide](./zotero-reference-guide/SKILL.md) | PDF references add-on for enriching Zotero library metadata |
| [zotero-scholar-guide](./zotero-scholar-guide/SKILL.md) | Save papers with metadata to Zotero via its API programmatically |
| [zotfile-attachment-guide](./zotfile-attachment-guide/SKILL.md) | Guide to ZotFile for Zotero attachment management, renaming, and syncing |
05

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeNA
L2Instruction surface (what it tells the agent)FAIL
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (4)

CRITICALPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
mendeley-api/SKILL.md:26
curl -X POST "https://api.mendeley.com/oauth/token" \
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine
HIGHPrompt injection · prompt.credential_read · CWE-94, CWE-1427
mendeley-api/SKILL.md:25
# 2. Get access token via client credentials (for catalog search)
Why it matters. asks the agent to read credentials
HIGHPrompt injection · prompt.credential_read · CWE-94, CWE-1427
mendeley-api/SKILL.md:150
"""Obtain access token via client credentials."""
Why it matters. asks the agent to read credentials
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
zotero-better-bibtex-guide/SKILL.md:72
**Pull Export via HTTP**: BBT runs a local HTTP server that serves your bibliography on demand. Configure your LaTeX build system to pull the latest `.bib` file from `http://127.0.0.1:23119/better-bib

Gates applied: critical_finding, no_behavioural_pass, undeclared_transfer.

Audited 2026-10-08 · audit v0.4.1 · source sha e1ba289846fdfull audit observations/trust-audit/skill/brycewang-stanford__citation.json · Report an issue / request a re-scan
06

Audit history

Every audit this skill has had.

DateSourceVerdictGradeScoreChange
2026-10-08e1ba289846fdBLOCKD69first audit
07

Questions

What does the Citation skill do?

🔬 A curated collection of 23,000+ agent skills for empirical research across 8 social science disciplines. | 精选 23,000+ AI Agent 技能库,覆盖8大社会科学学科的实证研究。CoPaper.AI 20分钟完成一篇可复现的规范实证论文,并支持用户上传 Skills。-- Maintained by CoPaper.AI from Stanford REAP.

Is Citation safe to install?

No — not without reading the findings first. The audit graded it D (69/100) and found 3 critical or high issues in the source. Each one is listed on this page with the file and line it is on.

What can Citation access on my machine?

The audit observed no filesystem, network or shell use at all in its source.

What do I need installed to use Citation?

Its own instructions reference read. Dependencies are pinned to exact versions.

Which assistants does Citation work with?

Its documentation mentions claude-code, claude-desktop and openclaw. That is what the text claims, not a compatibility test we ran.

How current is this page?

The grade is for one exact copy of the source (e1ba289846fd), read on 2026-10-08. The repository is watched, and a new audit runs when it changes — this is the first audit.

Advertisement