Searches 18 scholarly APIs for papers, preprints, citations, open-access full text, repository records, and journal OA status, and returns results with reproducible provenance. Covers PubMed, PMC, Europe PMC, bioRxiv, medRxiv, arXiv, OpenAlex, Crossref, Semantic Scholar, CORE, Unpaywall, OpenCitations, PubTator3, Zenodo, Figshare, ROR, BioStudies, and DOAJ. Use when searching for papers, citations, DOI/PMID/arXiv lookups, abstracts, full text, open-access PDFs, preprints, citation graphs, author publications, biomedical entity annotations, deposited records (Zenodo, Figshare, BioStudies),…
- Stars
- 23
- Version
- v1
- Copies
- 0
Overview
Waxell rates it high risk: 5 findings, highest severity critical.
- Highest severity
- critical
- Findings
- 5
- What ran
- Static analysis
A clean result means nothing alarming in what is published, not a guarantee. How the checks work
We don't republish the skill's instructions. Read them on GitHub at the reviewed commit.
Security
Security scan
Checked 2 days ago
Result
High risk Waxell rates it high risk: 5 findings, highest severity critical.
Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work
Findings (5)
critical · 5
- critical
Tells Claude to download a script and pipe it to a shell
SKILL.md:211 · skill_risk:S1
- critical
Tells Claude to download a script and pipe it to a shell
SKILL.md:214 · skill_risk:S1
- critical
Tells Claude to download a script and pipe it to a shell
references/arxiv.md:182 · skill_risk:S1
- critical
Tells Claude to download a script and pipe it to a shell
scripts/arxiv_atom.py:17 · skill_risk:S1
- critical
Tells Claude to download a script and pipe it to a shell
scripts/openalex_abstract.py:14 · skill_risk:S1
Versions
Version history
Each distinct content we have seen, newest first, with the verdict it got at the time.
One version so far: v1 (2.0), seen 2026-11-03.
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF
More research skills and plugins
tavily-clipracticalswanRoute Tavily web-search, extraction, mapping, crawling, and cited-research requests to the narrowest `tvly` command. Use for command-line… High riskResearchEngineering23
anti-detect-browserantibrowDrive Chromium from standard Playwright APIs with a real-device fingerprint applied in the kernel, one persistent isolated profile per… Review findingsResearchEngineering21
multi-account-scrapingantibrowRun the same scrape or task across many accounts at once - each in its own browser profile with its own fingerprint, cookies and exit IP -… Review findingsResearchEngineering21
emblem-defi-yieldemblemcompanyDeFi yield research and liquid staking via EmblemAI. Discover yield opportunities, compare protocols, check DeFi positions with Nansen,… Review findingsResearchAI & agents12