ceir-publication-sync — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited ceir-publication-sync (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Primary source. No browser needed — call REST endpoints directly.
BASE = https://forschungsdatenbank.charite.de/experts/expert
GET /publications/pub_per_exp/{token}/FPS → publications
GET /exp/co_per_exp/{token}/FPS → co-authors
GET /exp/info_per_exp/{token} → profile infoUse 0.3s delay between requests. Returns: title, authors, year, DOI, journal, volume/issue/pages, abstract, PubMed/PMC links, open access status, internal co-authors with tokens.
Implementation: src/zotero_comfort/external/charite.py — ChariteClient class, CEIR_TEAM roster.
src/zotero_comfort/external/pubmed.py): Enrich metadata, verify DOIs, get PMIDssrc/zotero_comfort/external/arxiv.py): Low priority, most team output is journals/conferencesPublications appear under multiple members. Deduplicate with:
First occurrence wins. See ChariteClient._deduplicate().
~/.secret/ceir-os-zotero-token (format: library_id:api_key)workflows_external.py → _paper_to_zotero_item()~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.