The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches citation metadata from the Crossref REST API (api.crossref.org) and utilizes the requests library, which is a common and well-known dependency managed by the uv tool.
[COMMAND_EXECUTION]: The skill uses a bash wrapper (scripts/lookup) to execute its core Python functionality, passing user-provided arguments to the script via uv run.
[INDIRECT_PROMPT_INJECTION]: The skill ingests and processes external publication data, creating a potential surface for indirect prompt injection.
Ingestion points: scripts/lookup.py reads user-specified local files for bibliography auditing and fetches publication metadata from the external api.crossref.org endpoint.
Boundary markers: The instructions do not define specific delimiters to separate untrusted citation data from the agent's instructions.
Capability inventory: scripts/lookup.py is capable of making network GET requests to retrieval metadata and writing output to a local file using the --output parameter.
Sanitization: The tool normalizes DOI strings for lookup but does not implement specific sanitization or filtering for the metadata fields returned by the Crossref API before presenting them to the agent.

crossref-lookup