Agent skill · Audited from source
Paper Notes
skill · WILLOSCAR/research-units-pipeline-skillsLicence not declaredAudited 19 Oct 2026 · source 81994516a430
Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit 81994516a430 and observed network access and no hard-coded secrets. The audit raised 4 findings, 0 critical or high. What it does: Write structured notes for each paper in the core set into `papers/paper_notes.jsonl` (summary/method/results/limitations).
Cite
Cite this page
ModelsAtlas. “Paper Notes (WILLOSCAR/research-units-pipeline-skills)”. Retrieved 19 Oct 2026. https://modelsatlas.com/skills/willoscar/paper-notes
Trust audit
Audit 0.4.1 · source read 19 Oct 2026
CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 16,667 of 17,602 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkDeclared1 observation
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | WARN | 2 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | WARN | 2 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass, no license.
Findings (4)
MEDIUMInventory / provenanceinv.symlink · .claude/skills
.claude/skills
- Why
- link not followed
- Fix
- —
MEDIUMNetwork egressnet.beacon_words · scripts/run.py:880
if any(w in low for w in ['attack', 'vulnerab', 'prompt injection', 'exfiltration', 'jailbreak', 'guardrail', 'sandbox']):
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWInventory / provenanceinv.no_license
- Why
- no LICENSE file and no repo licence
- Fix
- add a licence
LOWInsecure cryptocrypto.weak_hash · scripts/run.py:860
h = hashlib.sha1(f"{kind}|{snippet}".encode('utf-8', errors='ignore')).hexdigest()[:10]- Why
- No further detail recorded for this rule.
- Fix
- —
Audit 0.4.1 · source sha 81994516a430 · 19 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- PublisherWILLOSCAR GitHub userOwner of the repository this skill is read from
- Source folderWILLOSCAR/research-units-pipeline-skills/.codex/skills/paper-notesThe exact folder we audited
- LicenceNot declaredAs the repository states it
- Commit pinned for this verdict81994516a430A new audit runs when the source changes
- Repository statusNot archivedLast push 14 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Write structured notes for each paper in the core set into `papers/paper_notes.jsonl` (summary/method/results/limitations).
--- name: paper-notes description: "Write structured notes for each paper in the core set into `papers/paper_notes.jsonl` (summary/method/results/limitations)." --- # Paper Notes ## Triggers & routing - **Trigger**: paper notes, structured notes, reading notes, 论文笔记, paper_notes.jsonl. - **Use when**: survey 的 evidence 阶段(C3),已有 `papers/core_set.csv`(以及可选 fulltext),需要为后续 claims/citations/writing 准备可引用证据。 Produce consistent, searchable paper notes that later steps (claims, visuals, writing) can reliably synthesize. This is still **NO PROSE**: keep notes as bullets / short fields, not narrative paragraphs. ## Load Order Always read: - `references/overview.md` - `references/note_schema.md` Read by task: - `references/limitation_taxonomy.md` when writing or reviewing limitations (avoid boilerplate) - `references/result_extraction_examples.md` when extracting key_results (good vs bad examples) - `references/source_text_hygiene.md` when result/limitation fields still preserve paper self-narration or author-result wrappers Machine-readable assets: - `assets/note_schema.json` — JSONL record schema for validation - `assets/evidence_tags.json` — evidence bank tagging categories (extensible without code changes) - `assets/source_text_hygiene.json` — note-field source sentence cleanup policy - repo-wide `assets/limitation-signals.json` — shared polarity rules for distinguishing unresolved constraints from resolved failures or improvements ## Script Boundary Use `scripts/run.py` only for: - deterministic scaffold generation from core_set + metadata - priority selection based on mapping coverage - evidence bank construction from structured note fields Do not treat `run.py` as the place for: - paper-specific limitation prose (use `references/limitation_taxonomy.md` for guidance) - domain-specific evaluation heuristics hidden in code - reader-facing narrative text ## Role cards (prompt-level guidance) - **Close Reader** - Mission: extract what is *specific* and *checkable* (setup, method, metrics, limits). - Do: name concrete tasks/benchmarks and what the paper actually measures. - Avoid: generic summary boilerplate that could fit any paper. - **Results Recorder** - Mission: capture evaluation anchors that later writing needs. - Do: record task + metric + constraints (budget/tool access) whenever available. - Avoid: copying numbers without the evaluation setting that makes them meaningful. - Avoid: promoting artifact introductions (`X enables ...`, `our framework features ...`) into `key_results`. - Avoid: promoting benchmark-positioning, field-motivation, or author-navigation lines (`we apply ... and show ...`, `we then discuss how ...`) into `key_results`. - **Limitation Logger** - Mission: capture the caveats that change interpretation. - Do: write paper-specific limitations (protocol mismatch, missing ablations, threat model gaps). - Avoid: repeated generic limitations like “may not generalize” without specifics. ## When to use - After you have a core set (and ideally a mapping) and need evidence-ready notes. - Before writing a survey draft. ## Inputs - `papers/core_set.csv` - Optional: `outline/mapping.tsv` (to prioritize) - Optional: `papers/fulltext_index.jsonl` + `papers/fulltext/*.txt` (if running in fulltext mode) ## Outputs - `papers/paper_notes.jsonl` (JSONL; one record per paper) - `papers/evidence_bank.jsonl` (JSONL; addressable evidence snippets derived from notes; profile target: course paper >=4, A150++ >=7 items/paper on average) ## Decision: evidence depth - If you have extracted text (`papers/fulltext/*.txt`) → enrich key papers using fulltext snippets and set `evidence_level: "fulltext"`. - If you only have abstracts (default) → keep long-tail notes abstract-level, but still fully enrich **high-priority** papers (see below). ## Workflow (heuristic) Uses: `outline/mapping.tsv`, `papers/fulltext_index.jsonl`. 1. Ensure **coverage**: every `paper_id` in `papers/core_set.csv` must have one JSONL record. 2. Use mapping to choose **high-priority papers**: - heavily reused across subsections - pinned classics (ReAct/Toolformer/Reflexion... if in scope) 3. For high-priority papers, capture: - 3–6 summary bullets (what’s new, what problem setting, what’s the loop) - `method` (mechanism and architecture; what differs from baselines) - `key_results` (benchmarks/metrics; include numbers if available) - `limitations` (specific assumptions/failure modes; avoid generic boilerplate) 4. For long-tail papers: - keep summary bullets short (abstract-derived is OK) - still include at least one limitation, but make it specific when possible 5. Assign a stable `bibkey` for each paper for citation generation. ## Quality checklist - [ ] Coverage: every `paper_id` in `papers/core_set.csv` appears in `papers/paper_notes.jsonl`. - [ ] High-priority papers have non-`TODO` method/results/limitations. - [ ] Limitations are not copy-pasted across many papers. - [ ] `evidence_level` is set correctly (`abstract` vs `fulltext`). - [ ] Evidence bank: `papers/evidence_bank.jsonl` exists and meets the selected profile (course paper >=4; A150++ >=7 items/paper on average). ## Helper script (optional) ### Quick Start - `uv run python .codex/skills/paper-notes/scripts/run.py --help` - `uv run python .codex/skills/paper-notes/scripts/run.py --workspace <workspace>` ### All Options - See `--help` (this helper is intentionally minimal) ### Examples - Generate notes, then optionally enrich `priority=high` papers: - Run the helper once, then refine `papers/paper_notes.jsonl` (e.g., add full-text details for key papers and diversify limitations). ### Notes - The helper writes deterministic metadata/abstract-level notes and marks key papers with `priority=high`. - In `pipeline.py --strict` it will be blocked if high-priority notes are incomplete (missing method/key_results/limitations) or contain placeholders. ## Troubleshooting ### Common
Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 8199451
git clone https://github.com/WILLOSCAR/research-units-pipeline-skills git -C research-units-pipeline-skills checkout 81994516a430
The author documents no install command, so this uses the repository directly. Our verdict covers commit 81994516a430 only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Codex | Mentioned in its text, not tested | Skills for Codex · About Codex |
Audit history
Every audit, every source change
- !CAUTION B 89 / 100
first audit · source
81994516a430
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/willoscar/paper-notes/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
All automation skills →WILLOSCAR/research-units-pipeline-skills
Compile the Beamer tutorial deck and write a build report.
WILLOSCAR/research-units-pipeline-skills
Generate a Beamer slide deck from the final tutorial and approved module structure.
WILLOSCAR/research-units-pipeline-skills
Build a retrieval-informed chapter skeleton (`outline/chapter_skeleton.yml`) from taxonomy/core scope before stable H3 decomposition.
WILLOSCAR/research-units-pipeline-skills
Score an existing reader-facing deliverable and emit a deterministic PASS/FAIL scorecard plus bounded repair plan; use after synthesis, not to rewrite content.
WILLOSCAR/research-units-pipeline-skills
Review and record one pending human checkpoint in a research Workspace; use when a HUMAN Unit is blocked on an `Approve C*` decision, and never treat silence or artifact existence as approval.
WILLOSCAR/research-units-pipeline-skills
Lock an ideation run into a single-source-of-truth brainstorm brief (`output/trace/IDEA_BRIEF.md`) and a replayable multi-query plan (`queries.md`).
Add this badge to your README
[](https://modelsatlas.com/skills/willoscar/paper-notes/)
<a href="https://modelsatlas.com/skills/willoscar/paper-notes/"><img src="https://modelsatlas.com/skills/willoscar/paper-notes/badge.svg" alt="ModelsAtlas: CAUTION B"></a>
Questions about Paper Notes
What does the Paper Notes skill do?
Is Paper Notes safe to install?
What can Paper Notes access on my machine?
Which assistants does Paper Notes work with?
How current is this page?
Sources
- github.com/WILLOSCAR/research-units-pipeline-skills/tree/main/.c — the audited source at commit 81994516a430 and every finding aboveObserved · 19 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the Paper Notes skill do?
- Is Paper Notes safe to install?
- What can Paper Notes access on my machine?