{"id":"cmuxio1lr0txwad0790xotbus","slug":"literature-review","publicId":"74755a25-7d69-4dd1-9e88-43f2e39ea7d2","name":"literature-review","description":"Conducts systematic, scoping, and narrative literature reviews using PubMed, arXiv, bioRxiv, Semantic Scholar, and other appropriate sources. Use for research synthesis, reproducible literature searches, screening, citation checking, or preparing Markdown and PDF reviews. Tracks search coverage, records versus studies, and evidence limitations; supports meta-analysis planning but does not supply a meta-analysis engine.","version":"","author":"k-dense-ai","license":"MIT license","compatibility":"Python 3.10+ with requests; network for DOI checks and searches. Optional parallel-cli requires Parallel authentication. PDF export needs Pandoc and XeLaTeX; AI schematics need OPENROUTER_API_KEY.","status":"completed","overallGrade":"C","scannerVersion":11,"fileCount":12,"hasSkillMd":true,"hasScripts":true,"hasReferences":true,"hasEvals":false,"hasAssets":true,"sourceType":"github","sourceUrl":"https://github.com/k-dense-ai/scientific-agent-skills/tree/main/skills/literature-review","createdAt":"2026-10-07T02:56:58.768Z","completedAt":"2026-10-07T02:56:58.766Z","visibility":"public","publishedAt":"2026-09-10T21:06:02.250Z","category":"","frameworks":[],"badgeStatus":"flagged","downloadCount":0,"verdictRationale":{"summary":"Skill failed: 1 hard fail in security or structure checks.","verdict":"fail","scanners":[{"source":"vettd","weight":1,"verdict":"fail"},{"source":"cisco","weight":0.8,"verdict":"pass"}],"consensus":"fail","warnTriggers":["References external URL — review for indirect prompt injection risk"],"policyVersion":"consensus-v1","hardFailTriggers":["Base64-decoded content stored in variable"]},"verdictPolicyVersion":"consensus-v1","skillId":"cmtw0oktxbbjyad075acb6zbi","findings":[{"id":"cmuxio1lr0txxad07bp92jplo","source":"vettd","category":"security","label":"Base64-decoded content stored in variable","detail":"Detected in scripts/generate_schematic_ai.py:312 — `image_data = base64.b64decode(encoded, validate=True)`","severity":"high","ruleId":"VTD-0025","owaspLlmCategory":null,"intent":"negligent","chainId":null,"fingerprint":"ad55b5854fc20975604e9e600f19f328","filepath":"scripts/generate_schematic_ai.py"},{"id":"cmuxio1lr0txzad074taudl0v","source":"cisco","category":"security","label":"Code makes network requests","detail":"SKILL.md — Skill code makes network requests. While not controlled by allowed-tools, network access should be documented and justified in the skill description.","severity":"medium","ruleId":"VTD-0087","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"bbe419cfb0687c04e7f13893e88c32c2","filepath":"SKILL.md"},{"id":"cmuxio1lr0ty2ad07uuqhrrcb","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/generate_schematic_ai.py:263 — Pattern detected: requests.post(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"7562da122ba987831eac5e16c3710500","filepath":"scripts/generate_schematic_ai.py"},{"id":"cmuxio1lr0txyad07z8mgryll","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"42638a8b7e9fc5df27449992eaebc724","filepath":"SKILL.md"},{"id":"cmuxio1lr0ty0ad077alcloix","source":"cisco","category":"security","label":"Code uses search/grep patterns but Grep tool not in allowed-tools","detail":"SKILL.md — Skill restricts tools to ['Read', 'Write', 'Edit', 'Bash'] but code uses regex search patterns","severity":"low","ruleId":"VTD-0087","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"bbe419cfb0687c04e7f13893e88c32c2","filepath":"SKILL.md"},{"id":"cmuxio1lr0ty1ad07dm5t8i3a","source":"cisco","category":"security","label":"Script contacts a destination the documentation never mentions","detail":"scripts/generate_schematic_ai.py:235 — Script contacts or configures 'openrouter.ai' but the skill documentation never visibly mentions it. Undocumented network destinations can indicate behaviour the manifest and description do not disclose.","severity":"low","ruleId":"UNDECLARED_NETWORK_DESTINATION","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"020e63e1c0e44c60221fa4e059e23290","filepath":"scripts/generate_schematic_ai.py"}],"scannerRuns":[{"source":"cisco","status":"success","verdict":null,"grade":"B","findingCount":4,"criticalCount":0,"highCount":0},{"source":"vettd","status":"success","verdict":null,"grade":"C","findingCount":2,"criticalCount":0,"highCount":1}],"user":{"name":"Kris Mondlane","image":"https://avatars.githubusercontent.com/u/237055?v=4"},"repository":{"owner":"k-dense-ai","name":"scientific-agent-skills"},"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T19:57:08.370Z","lastVerifiedAt":"2026-10-21T19:57:08.370Z","lastChangeDetectedAt":"2026-10-06T10:00:24.288Z","scannedHash":"abbd5cd9f06e1fb4fae66345a4df790cc34d2ad8","latestUpstreamHash":"abbd5cd9f06e1fb4fae66345a4df790cc34d2ad8","nextCheckDueAt":"2026-10-22T21:38:53.046Z"},"signalCategories":[{"category":"safety","label":"Safety","form":"graded","verdict":null,"rows":[]},{"category":"reliability","label":"Reliability & Quality","form":"graded","verdict":null,"rows":[]},{"category":"performance","label":"Performance","form":"measured","verdict":{"form":"measured","magnitudes":[{"ruleId":"performance/static-context-tokens","label":"Static context tokens","value":2559,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body"}]},"rows":[{"origin":"signal","id":"cmuxio3740u8mad07czdvcdaw","subjectType":"skill_audit","subjectId":"cmuxio1lr0txwad0790xotbus","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/progressive-disclosure","severity":null,"label":"Progressive disclosure","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:56:54.000Z","payload":null},{"origin":"signal","id":"cmuxio20w0u04ad0713x6ikn0","subjectType":"skill_audit","subjectId":"cmuxio1lr0txwad0790xotbus","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/static-context-tokens","severity":null,"label":"Static context tokens","detail":null,"valueNum":2559,"valueText":null,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body","derivation":null,"confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:56:54.000Z","payload":null}]},{"category":"cost","label":"Cost","form":"measured","verdict":null,"rows":[]},{"category":"compatibility","label":"Compatibility","form":"unjudged","verdict":{"form":"unjudged"},"rows":[{"origin":"signal","id":"cmuxio39l0u8uad07fdxc3kwe","subjectType":"skill_audit","subjectId":"cmuxio1lr0txwad0790xotbus","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/cli-help","severity":null,"label":"CLI help","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:56:54.000Z","payload":null},{"origin":"signal","id":"cmuxio21m0u0iad07v9c6v27k","subjectType":"skill_audit","subjectId":"cmuxio1lr0txwad0790xotbus","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-environment-assumptions","severity":null,"label":"Declared environment assumptions","detail":null,"valueNum":null,"valueText":"Python 3.10+ with requests; network for DOI checks and searches. Optional parallel-cli requires Parallel authentication. PDF export needs Pandoc and XeLaTeX; AI schematics need OPENROUTER_API_KEY.","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:56:54.000Z","payload":null},{"origin":"signal","id":"cmuxio2qf0u54ad07ffe9k4rt","subjectType":"skill_audit","subjectId":"cmuxio1lr0txwad0790xotbus","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-name","severity":null,"label":"Declared skill name","detail":null,"valueNum":null,"valueText":"literature-review","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:56:54.000Z","payload":null},{"origin":"signal","id":"cmuxio29y0u27ad07r3nmrzck","subjectType":"skill_audit","subjectId":"cmuxio1lr0txwad0790xotbus","relatedType":"declared_tool","relatedId":"Bash","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-required-tools","severity":null,"label":"Declared required tool","detail":null,"valueNum":null,"valueText":"Bash","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:56:54.000Z","payload":null},{"origin":"signal","id":"cmuxio2cp0u2wad07qcvt7lt2","subjectType":"skill_audit","subjectId":"cmuxio1lr0txwad0790xotbus","relatedType":"declared_tool","relatedId":"Edit","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-required-tools","severity":null,"label":"Declared required tool","detail":null,"valueNum":null,"valueText":"Edit","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:56:54.000Z","payload":null},{"origin":"signal","id":"cmuxio2f80u38ad07bvekqeps","subjectType":"skill_audit","subjectId":"cmuxio1lr0txwad0790xotbus","relatedType":"declared_tool","relatedId":"Read","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-required-tools","severity":null,"label":"Declared required tool","detail":null,"valueNum":null,"valueText":"Read","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:56:54.000Z","payload":null},{"origin":"signal","id":"cmuxio2jr0u3qad074erpxokp","subjectType":"skill_audit","subjectId":"cmuxio1lr0txwad0790xotbus","relatedType":"declared_tool","relatedId":"Write","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-required-tools","severity":null,"label":"Declared required tool","detail":null,"valueNum":null,"valueText":"Write","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:56:54.000Z","payload":null},{"origin":"signal","id":"cmuxio3ch0u96ad07179ylmgc","subjectType":"skill_audit","subjectId":"cmuxio1lr0txwad0790xotbus","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/interactive-prompts","severity":"high","label":"Interactive prompts detected","detail":"Agents run in non-interactive shells — replace prompts with CLI flags or stdin","valueNum":null,"valueText":null,"unit":null,"method":null,"derivation":null,"confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:56:54.000Z","payload":null},{"origin":"signal","id":"cmuxio3a10u90ad07a6wgpdfo","subjectType":"skill_audit","subjectId":"cmuxio1lr0txwad0790xotbus","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/structured-output","severity":null,"label":"Structured output","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:56:54.000Z","payload":null}]},{"category":"sentiment","label":"Popularity","form":"unjudged","verdict":null,"rows":[]},{"category":"characteristics","label":"Characteristics","form":"unjudged","verdict":null,"rows":[]}],"signalCount":35,"publisherSupplied":["name","description","author","version","license"]}