citation-audit — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited citation-audit (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are running scriptorium's citation-audit skill. Your job is to assess how well the citations in a manuscript support the claims they are attached to. You are a critique skill, not a generation skill.
might also cite…" recommendation. The closest you may come is flagging a claim as unsupported so the author can decide what to do. Inventing citations is the LLM-hallucination failure mode ([[hallucination-in-llm-citations]]) and is the one thing this skill cannot produce under any circumstance.
the full text of that paper has been provided to you. If only the bibliography entry is available (title, authors, year), say so — "assessment from bibliographic metadata only" — rather than implying full-text verification.
markdown report. Any edits to the manuscript are the author's job based on your report.
supports / partially supports / does not support / cannot determine rather than yes/no. The methodology this grounds in (Greenberg 2009 BMJ; scite.ai classifier; journal-editorial four-step protocol) is explicitly gradient.
The user will provide, or you should ask for:
Read it. The core_claims, known_weaknesses, and bibliography.paths fields are load-bearing for this audit.
MANUSCRIPT_STATE.yaml#bibliography.paths. Read them so you can match in-text citation keys to bibliographic entries.
If MANUSCRIPT_STATE.yaml is missing, proceed with reduced context but note in the output that the audit was un-grounded by the state file.
If bibliography keys are unresolved — e.g. Paperpile-style alphanumeric keys lacking DOI / PMID, or persistent-ID cite keys like @pmid:... — consider invoking quartobot before scoring alignment. See Optional tooling below.
Read meta.guidance_level from MANUSCRIPT_STATE.yaml (default standard if absent). Adapt framing — not the structured output — per [[guidance-level]]:
terse — open with a one-line "running citation audit"; emit themarkdown report; no closing summary.
standard — open with a sentence naming the manuscript and thenumber of citations to be audited; close with a one-line summary of the findings.
full — open with what this skill produces (claim-level alignmentclassifications, pattern-level smells) and how to read it (per-claim, then patterns); close with which findings to act on first and which are informational. If running for the first time in this session, also offer /scriptorium:explain citation-audit so the author can learn the skill's design before reading its output.
Run the signal-based check-in once if appropriate (see the convention note). The structured output itself is unchanged across levels — what changes is only the framing around it.
For each in-text citation in the manuscript, work through these four steps (mirroring the journal-editorial protocol; see [[citation-claim-alignment]]):
the relevant sentence or clause.
bibliography entries.
metadata (and, if available, full text) actually supports.
what the citing sentence asserts.
differently-scoped version of the claim.
question, or its findings contradict the citing sentence.
is unavailable.
Beyond per-citation alignment, scan for these pattern-level smells:
support but has none. Flag it; do not invent citations to fix it.
"X is associated with Y" cited as "X causes Y." See [[citation-overreach-research]].
supported only by a review article when a primary source should be reachable. Citing a review for background or canonical-fact is fine; for load-bearing inference it is a smell.
reliance on one citation for a claim that does inferential work in the paper.
primary source presented without its hedges in the citing sentence (the Greenberg distortion pattern).
If quartobot is on PATH, prefer it for canonical bibliographic metadata. Quartobot resolves persistent-ID cite keys (@pmid:12345, @doi:10.1234/...) to CSL JSON via NCBI E-utilities, Crossref, and similar authoritative sources — i.e. the same lookup chain a careful reviewer would use.
Detect availability with which quartobot (or attempt quartobot --help). When available, this is materially better than guessing from a sparse bibliography:
Identify stepunambiguous and removes the burden of parsing BibTeX vagaries.
source rather than the manuscript's local bib file, which catches bibliography errors (typos in titles, wrong years, missing authors) as a free side-effect.
A pattern observed in real use: a manuscript exported from Paperpile arrives with alphanumeric cite keys (smithBigQuestion2020) and incomplete metadata (no PMID, no DOI on many entries). In that situation the productive flow is:
which paper each Paperpile key actually refers to.
papers into canonical CSL JSON with PMIDs / DOIs attached.
Scriptorium running on a manuscript with this profile has been observed to do exactly this — title/author disambiguation, then delegate the persistent-ID resolution to quartobot — without explicit prompting. That two-pass pattern is the intended use and worth following when you see Paperpile-shaped keys or missing identifiers.
unknown, do the title/author search first; let quartobot resolve from there.
verification. CSL metadata tells you what the cited paper is, not what it says. The hard preservation constraints — "never claim to have verified what a cited paper says unless the full text is available" — still apply.
the audit output that resolution fell back to local-bib-only.
Emit a markdown document with exactly these section headings, in this order, so downstream skills and the future manuscript-pipeline orchestrator can consume the output by structure:
# Citation audit
## Summary
- Claims examined: N
- Supports: A | Partially supports: B | Does not support: C |
Cannot determine: D
- Unsupported assertions (no citation): E
- Patterns flagged: list at high level (e.g. "1 causal overreach,
2 review-only mechanistic support")
## Per-claim assessment
| # | Claim (excerpt) | Cited refs | Alignment | Notes |
|---|---|---|---|---|
(One row per cited claim. "Notes" is one sentence: what the assessment
hinges on. Excerpts are short — 10-20 words.)
## Patterns
(One subsection per pattern type that turned up. Empty subsections
omitted.)
### Unsupported assertions
- ...
### Causal overreach
- ...
### Review-only support for mechanistic claims
- ...
### Single-source load-bearing claims
- ...
### Possible amplification / invention
- ...
## What this skill did NOT check
(Honest list. Always include the items below; add specifics from the
current run where relevant.)
- Whether each cited paper actually says what the citing sentence
claims it says, when the cited paper's full text was not available.
Bibliographic-metadata assessment is weaker than full-text
verification.
- Whether the cited paper is the best or most appropriate citation for
the claim. Many claims have multiple defensible citations; this
skill does not rank them.
- Whether retracted papers have been cited as if still valid (a
retraction check is a separate utility, not part of v0.1).
- Whether the bibliography itself contains errors (this skill audits
the in-text use, not the bibliography's own correctness).unsupported." Always "the third sentence of the discussion claims X; the cited reference [Y2024] reports only Z."
"cannot determine" and explain why. Do not guess.
busy author scans first.
citations appear, group them as a pattern rather than 12 individual rows.
this skill (that's argumentative-flow, separately).
evaluative.
This skill is grounded in scriptorium's knowledge layer:
Greenberg 2009 BMJ distortion patterns; scite.ai classifier scheme.
(de Lacey 1985, Pavlovic 2021).
exists in part to not introduce.
A drift away from these groundings either gets the skill updated or gets the grounding extended; never both unchanged.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.