Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Aperivue/medsci-skills --skill fulltext-retrievalgit clone --depth 1 https://github.com/Aperivue/medsci-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/aperivue/medsci-skills/fulltext-retrieval)<a href="https://agentmods.dev/skills/aperivue/medsci-skills/fulltext-retrieval"><img src="https://agentmods.dev/badge/skills/aperivue/medsci-skills/fulltext-retrieval/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/aperivue/medsci-skills/fulltext-retrieval"><img src="https://agentmods.dev/badge/skills/aperivue/medsci-skills/fulltext-retrieval.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Tool Misuse · line 81 Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.Fix: Limit tool chaining depth and validate the output of each tool before passing it to the next. Require explicit user approval for multi-step chains.
- medium Excessive Agency · line 126 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium Excessive Agency · line 255 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00063 | $0.01949 |
| Opus 5.5 | $0.00025 | $0.00780 |
| Sonnet 5.5 | $0.00013 | $0.00390 |
| Haiku 4.5 | $0.00006 | $0.00195 |
Grade A, and why
fulltext-retrieval scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 24d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 139 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Fulltext Retrieval Skill
Batch download open-access full-text PDFs from a DOI list using legitimate OA APIs only.
Paywalled articles fail by design and are listed in manual_needed.txt for institutional access
or ILL; never work around a paywall or publisher access control.
Pipeline
DOI → arXiv (10.48550/arXiv.* DOIs) → Unpaywall → PMC (Europe PMC / OA FTP / web) → OpenAlex → Crossref → landing page
Each DOI goes through these sources in order until a valid PDF (≥10 KB, %PDF- header) is found.
arXiv DOIs (10.48550/arXiv.2401.01234, version suffixes, old-style hep-th/9901001, or a bare
arXiv: id) resolve directly to the arXiv PDF first.
Run
Requires Python 3.10+ (stdlib only) and a contact email, which Unpaywall's Terms of Service require. The script paces its requests (0.3–0.5 s delays) for the APIs' rate limits.
python "${CLAUDE_SKILL_DIR}/fetch_oa.py" dois.txt --output pdfs/ --email [email protected]
# Verbose mode for debugging (per-DOI source trace)
python "${CLAUDE_SKILL_DIR}/fetch_oa.py" dois.txt -o pdfs/ -e [email protected] --verbose
Input formats:
- Plain text — one DOI per line.
- TSV / CSV with header, or a Markdown pipe table — must contain a
DOIcolumn; optionalPMID,Title, andFirstAuthor(surname or full name) columns.
A PMID makes the PMC lookup more reliable (PMID → PMCID conversion). Supply Title where
available: a DOI-only worklist can download a PDF but cannot establish title agreement.
FirstAuthor is optional additional evidence.
Output
- PDFs saved as
{DOI_safe}.pdf(slashes replaced with underscores). pdfs/retrieval_report.json— structured per-DOI report (below); override with--report PATH.<output>/manual_needed.txt— DOIs that could not be retrieved via OA; when a PMCID was resolved, the line also carries it and the PubMed Central article URL to open in a browser.- Summary with arXiv/OA/PMC/fail/skip counts.
Retrieval report (--report)
Every run writes the report (default <output>/retrieval_report.json), schema 2:
What ships with it
12 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- fetch_oa_report_challenge/expected/projection.json 614 B
- fetch_oa_report_challenge/extracted_text.json 407 B
- fetch_oa_report_challenge/results.json 175 B
- fetch_oa_report_challenge/run_challenge.py 3.1 KB runs code
- fetch_oa_report_challenge/verify.sh 286 B runs code
- fetch_oa_report_challenge/worklist.tsv 326 B
- fetch_oa.py 36 KB runs code
- pdf_to_md.py 5.3 KB runs code
- references/find_available_pdf.js 3.0 KB runs code
- skill.yml 2.8 KB
- tests/test_pdf_to_md.py 2.2 KB runs code
- tests/test_source_identity.py 20 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 24d ago Changed d96a28bb003a
- 26d ago Changed · -121 lines · +21 tokens per session c5b456bb16a4
- 27d ago Changed · +3 lines 05c5919bf1a9
- 1mo ago Changed · +35 lines 4d1defdcb710
- 1mo ago First seen · 222 lines · 42 tokens per session scan A d97c19a64d92
fulltext-retrieval is a skill published in the GitHub repository Aperivue/medsci-skills (352 stars, last pushed today), licensed MIT. It adds 63 tokens to every session and 1,949 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
lit-pdf-zotero
A research workflow for finding academic papers, downloading their PDFs, adding them to Zotero, and creating visual summaries. Zotero is a tool for organising references and research papers.
markitdown
Converts heterogeneous documents and selected URIs to Markdown with Microsoft MarkItDown for text analysis, search, and LLM/RAG ingestion. Covers safe local conversion, streams, Office/PDF/data formats, batch workflows, plugins, vision OCR, Azure extraction, and the official MCP server.
liteparse
Local document and PDF parsing that returns spatial text with bounding boxes. Use for extracting text from PDFs, DOCX, Office files, and images; running OCR on scans; producing layout-preserved JSON for RAG; batch-ingesting folders of papers; or rendering pages to PNG for multimodal agents. Distinguishing capabilities…
open-notebook
Organizes research with the self-hosted Open Notebook alternative to NotebookLM. Supports source ingestion (PDFs, web pages, audio, video, and Office documents), cited document chat, text and vector search, notes, custom transformations, and multi-speaker podcasts. Use when automating Open Notebook through its REST…
pptx-posters
Creates and audits editable scientific posters in macro-free PowerPoint (.pptx) from author-approved local content and assets. Used when the requested deliverable is a PowerPoint research/conference poster and exact physical, printer, accessibility, provenance, and package-security checks are required.
pdf-processing-pro
Production-ready PDF processing with forms, tables, OCR, validation, and batch operations. Use when working with complex PDF workflows in production environments, processing large volumes of PDFs, or requiring robust error handling and validation.