mlava/scholar-sidekick-api
Resolve scholarly identifiers (DOI including shortDOI aliases, PMID, PMCID, ISBN, arXiv, ISSN, ADS bibcode, WHO IRIS URL) into formatted citations (10,000+ CSL styles) and bibliography exports (BibTeX, RIS, EndNote, CSV…), and check retraction, open-access, and citation-fabrication status — for one citation or a whole bibliography at once. Calls a documented REST API over plain HTTP — no install, no API key needed for the free tier. Use when the user has a DOI, PMID, PMCID, ISBN, arXiv ID, ISSN, ADS bibcode, or WHO IRIS URL and asks to format a citation, build or export a bibliography, check whether a paper is retracted, open-access, or a fabricated citation, or audit every reference in a .bib/.ris/CSL-JSON bibliography.
91%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Low
Low-risk findings worth noting
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The skill instructs the agent to process bibliography files and text provided by the user, which may originate from external sources such as `.bib` or `.ris` files containing outsider-authored free text.
Where we found it
scholar-sidekick.com
domain · 15 sites
The skill documents calling the scholar-sidekick.com REST API endpoints via curl for all operations (format, export, retraction-check, oa-check, verify, audit, health).
rapidapi.com
domain · 1 site
The skill documents RapidAPI as an alternative paid gateway for the same Scholar Sidekick service.
SKILL.md
50
https://rapidapi.[REDACTED] and call
shortdoi.org
domain · 1 site
The skill documents that shortDOI aliases from shortdoi.org are accepted and expanded by the API.
SKILL.md
76
A shortDOI alias (`10/aabbe`, from shortdoi.org) is accepted anywhere a DOI is, and expanded to the full DOI before resolving.
crossref.org
domain · 1 site
The skill documents that the retraction-check endpoint uses Crossref data.
SKILL.md
97
(Crossref + Retraction Watch). One identifier per call — field is **`id`**.
retractionwatch.com
domain · 1 site
The skill documents that the retraction-check endpoint uses Retraction Watch data.
SKILL.md
97
(Crossref + Retraction Watch). One identifier per call — field is **`id`**.
unpaywall.org
domain · 1 site
The skill documents that the oa-check endpoint uses Unpaywall data.
SKILL.md
106
(Unpaywall). One identifier per call — field is **`id`**.
- Audited
- Security analysis