Agent skill · Audited from source

Protocol Writer

skill · WILLOSCAR/research-units-pipeline-skillsLicence not declaredAudited 19 Oct 2026 · source 81994516a430

★ 513pushed 14 days ago

✓SAFEGrade B · 89/100 · 19 Oct 2026 · 8199451

513repo stars · whole WILLOSCAR/research-units-pipeline-skills

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 81994516a430 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Use when `evidence-review` needs an operational protocol before screening and extraction.

Ask an AI about this pageGChatGPT CClaude PPerplexity GeGemini XGrok

CoCopilot AIGoogle AI Mode

Cite

Cite this page

ModelsAtlas. “Protocol Writer (WILLOSCAR/research-units-pipeline-skills)”. Retrieved 19 Oct 2026. https://modelsatlas.com/skills/willoscar/protocol-writer

Trust audit

Audit 0.4.1 · source read 19 Oct 2026

Trust score89/100✓SAFE B

0 critical0 high1 medium1 low0 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.

What the source does

FilesystemNone observedNo reads or writes in the source
NetworkNone observedNo outbound calls in the source
ShellNone observedNo commands run in the source
DependenciesPinnedNothing floats
SecretsNone foundNo keys in source

Five audit layers

Layer	What we check	Result	Findings
`L0` Provenance	Repo owner, licence, archive status, activity	WARN	2
`L1` Static source	Secrets, path traversal, supply chain, hidden code	PASS	0
`L2` Instructions	Prompt injection, authority framing, hidden directives	PASS	0
`L3` Inventory	The files and declarations match the source	PASS	0
`L4` Sandbox	Run in isolation and watch behaviour	SKIPPED why	0

Gates applied: no behavioural pass, no license.

Findings (2)

MEDIUMInventory / provenanceinv.symlink · .claude/skills

F-13 Inventory / provenanceCWE-1104Layer L0

.claude/skills

Why: link not followed
Fix: —

LOWInventory / provenanceinv.no_license

F-13 Inventory / provenanceCWE-1104Layer L0

Why: no LICENSE file and no repo licence
Fix: add a licence

Audit 0.4.1 · source sha 81994516a430 · 19 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

PublisherWILLOSCAR GitHub userOwner of the repository this skill is read from
Source folderWILLOSCAR/research-units-pipeline-skills/.codex/skills/protocol-writerThe exact folder we audited
LicenceNot declaredAs the repository states it
Commit pinned for this verdict81994516a430A new audit runs when the source changes
Repository statusNot archivedLast push 14 days ago
Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Use when `evidence-review` needs an operational protocol before screening and extraction.

---
name: protocol-writer
description: "Use when `evidence-review` needs an operational protocol before screening and extraction."
---

# Protocol Writer

## Triggers & routing

- **Trigger**: protocol, PRISMA, systematic review, inclusion/exclusion, 检索式, 纳入排除.
- **Use when**: `evidence-review` pipeline 的起点(C1),需要先锁定 protocol 再开始 screening/extraction。
- **Skip if**: 不是做 evidence/systematic review(或 protocol 已经锁定且不允许修改)。
- **Network**: none.
- **Guardrail**: protocol 必须包含可执行的检索与筛选规则;需要 HUMAN 签字后才能进入 screening。


Transforms the review question into an executable `evidence-review` protocol.

## Inputs

Required:
- `STATUS.md`

Optional:
- `GOAL.md`
- `DECISIONS.md`
- `queries.md`

## Output

- `output/PROTOCOL.md`

## Contract

The protocol must contain:
- review questions
- source/search specification
- inclusion and exclusion clauses with stable IDs
- screening plan
- extraction schema
- bias plan
- explicit HUMAN approval note

## Script boundary

`scripts/run.py` should:
- read current review context
- materialize an operational protocol
- write a stable extraction schema and clause IDs

It should not perform retrieval or screening itself.

## Acceptance

- `output/PROTOCOL.md` exists
- includes extraction schema and protocol clause IDs
- is operational enough for downstream screening

## Non-goals

- writing final synthesis prose
- screening candidate papers

Excerpt, first 1,382 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 8199451

Download folder ↗

git clone https://github.com/WILLOSCAR/research-units-pipeline-skills
git -C research-units-pipeline-skills checkout 81994516a430

The author documents no install command, so this uses the repository directly. Our verdict covers commit 81994516a430 only.

Works in

The author has not said which agents this skill supports, and we have not tested it in any.

Audit history

Every audit, every source change

2026-10-19
✓SAFE B 89 / 100
first audit · source 81994516a430