The Agent Skills Directory

[COMMAND_EXECUTION]: The skill invokes a local Python script scripts/nature_citation.py to perform manuscript segmentation and metadata retrieval. The script is self-contained and does not call external shell commands or arbitrary processes.
[EXTERNAL_DOWNLOADS]: The script communicates with the Crossref REST API (api.crossref.org) to fetch scholarly metadata. This is a well-known service and the communication is strictly limited to bibliographic data retrieval.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided manuscript text. This creates a surface for indirect prompt injection; however, the script implements sanitization using html.escape and json.dumps when generating the HTML citation browser, and the instructions emphasize conservative evaluation of results.
[DATA_EXPOSURE]: The skill does not access sensitive local files such as SSH keys or environment variables. It operates on input text and DOI identifiers provided through command-line arguments or files.

nature-citation