Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add zjunlp/SciAtlas --skill sciatlas-researcher-reviewgit clone --depth 1 https://github.com/zjunlp/SciAtlasWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zjunlp/sciatlas/sciatlas-researcher-review)<a href="https://agentmods.dev/skills/zjunlp/sciatlas/sciatlas-researcher-review"><img src="https://agentmods.dev/badge/skills/zjunlp/sciatlas/sciatlas-researcher-review/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zjunlp/sciatlas/sciatlas-researcher-review"><img src="https://agentmods.dev/badge/skills/zjunlp/sciatlas/sciatlas-researcher-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Excessive Agency · line 16 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00074 | $0.00992 |
| Opus 5 | $0.00037 | $0.00496 |
| Sonnet 5 | $0.00015 | $0.00198 |
| Haiku 4.5 | $0.00007 | $0.00099 |
Grade A, and why
sciatlas-researcher-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 86 lines — stays where its author put it; the contents beside it link to each section on GitHub.
SciAtlas Researcher Review
Use this skill to create a researcher profile from search-papers evidence only. Because this skill does not call author-specific SciAtlas commands, treat the result as a literature-grounded profile, not an authoritative CV.
Operating Contract
- Do not call any SciAtlas downstream, author, support, or report command. The only SciAtlas retrieval command allowed is
search-papers. - Use only
sciatlas search-papersfor retrieval. - Own the end-to-end novice flow: install or locate the CLI, guide registration, configure environment variables, run retrieval, inspect artifacts, and write the researcher profile.
- Ask the user only for email, verification code, token, or a clarification when the researcher name is ambiguous.
- Do not ask the user to run shell commands when tool access is available.
- Do not expose the full token.
Zero-Start Bootstrap
- Check whether the
sciatlasexecutable exists without invoking a SciAtlas command: useGet-Command sciatlas -ErrorAction SilentlyContinueon Windows PowerShell orcommand -v sciatlason macOS/Linux. Install if missing withpython -m pip install -e ./sciatlasorpython -m pip install "git+https://github.com/zjunlp/SciAtlas.git#subdirectory=sciatlas". - If
SCIATLAS_API_KEYis missing, guide the user throughhttp://sciatlas.openkg.cn/register; ask for email/code/token only when needed. - Configure:
$env:SCIATLAS_API_BASE_URL = "http://sciatlas.openkg.cn"
$env:SCIATLAS_API_KEY = "<token>"
setx SCIATLAS_API_BASE_URL "http://sciatlas.openkg.cn"
setx SCIATLAS_API_KEY "<token>"
export SCIATLAS_API_BASE_URL="http://sciatlas.openkg.cn"
export SCIATLAS_API_KEY="<token>"
- Verify with
search-papers --top-k 1only if needed.
Search Plan
Run only search-papers. Use the researcher name as part of the query and, when the user provides a field, include it as a keyword:
sciatlas search-papers --retrieval-mode hybrid --query "<researcher name> representative papers <field>" --keyword "high:<researcher name>" --keyword "middle:<field or known topic>" --top-k 10 --top-keywords 0 --max-titles 0 --max-refs 0 --bias-authorship high --bias-citation high --ranking-profile impact --report-max-items 10
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 86 lines · 74 tokens per session scan A 1022d1324b77
sciatlas-researcher-review is a skill published in the GitHub repository zjunlp/SciAtlas (149 stars, last pushed 1mo ago), licensed MIT. It adds 74 tokens to every session and 992 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
jurisd-research
Expert Australian/NZ legal research and AGLC4 citation using the jurisd MCP server. Use when finding cases or legislation (AustLII), looking up a provision offline, formatting or resolving citations, building a pinpoint, tracing who-cites-what, or producing an AGLC4 bibliography. Triggers on case law, legislation…
idea-spark
Generate ONE reviewer-defensible, implementable research idea with a concrete method and falsification plan from a stated research direction. Use when the user asks for a research idea, novelty analysis, bottleneck diagnosis, or paper-shape suggestion. Skip code review, debugging, and unconstrained brainstorming…
graph-mutation-plan
Cookbook for composing an applygraphmutations plan — stable entitykey patterns, the canonical label/edge vocabulary, evidence/invalidation/confidence discipline, and a worked example. Load this when building a non-trivial mutation plan.
paper2reel
Build an interactive HTML viewer that aligns paper2poster output with slide/video deck frames through a sidecar contentalignment.json, without modifying the original poster, PPTX, or blog deliverables.
potpie-infra-architecture
Use for project infra and architecture context: environments, adapters, runtime configuration, deployments, service dependencies, datastores, API contracts, ownership, incidents, and dependency blast radius.
alfworld-search-pattern-executor
Systematically searches a sequence of likely locations for a target object based on common sense. Use when you need to find a specific object and know which receptacles to check but not which one contains it. Takes a list of candidate receptacles, orchestrates navigation and inspection, and outputs when the target is…