research-sources SKILL.md skillA
research-sources from vecnode/vncode is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add vecnode/vncode/research-sources@git:20261013.34747c0Pins git:20261013.34747c0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- vecnode/vncode
- Path
packages/dsh-research/skills/research-sources/SKILL.md- Versions recorded
- 1
- Latest version
- git:20261013.34747c0, committed Oct 13, 2026
- Size
- 8,354 bytes
- Repository stars
- 10
- License
- AGPL-3.0
Get literature into a research run when the plugin fetches nothing — fetch the source yourself with web_fetch / web_search or take a file the person already has, READ it with the pdf_* tools or ocr, then ingest record and text together with rs_cite, bind locators, and cite with [@key]. Use when a run needs sources, when a library export has to come in, when a citation key is unknown, or when a claim cannot be checked against a source.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Where literature comes from `dsh-research` has **no client**. It resolves no DOI, searches no database and downloads no PDF. That is a feature and not a gap: retrieval happens once, through the harness's own `web_fetch` / `web_search` under a policy the person already trusts, and what comes back is a file that **stays put** — hashed, stored in `sources/`, and citable from any later session. The plugin's job is the record, not the fetching. So the chain is always: **you fetch → you read → `rs_cite` ingests**. ## Fetch it, or take the file the person has - `web_search` to find it, `web_fetch` for a page or a DOI landing page. Provenance is `crossref` / `arxiv` / `publisher` when you took the record from a metadata page, and `agent` when you typed it. - Or the person already has it: a download, a chat attachment, a Zotero/EndNote export, a PDF in `~/Downloads`. `rs_cite`'s `file` takes an absolute path, or one relative to the workspace — a relative path is resolved against the session's own working directory. Either way it becomes a real file with a sha256, which is what makes a quote checkable a month later. …
Read the whole file at its exact version.
How to install
mdr add vecnode/vncode/research-sources@sha256:c43b6e4a482c340aThe line at the top of this page pins the label git:20261013.34747c0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_nqvnplggpcbiewiq)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Oct 13, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (8354 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
vecnode/vncode · 10 stars · license AGPL-3.0 · pushed 2026-10-20 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_nqvnplggpcbiewiq GET https://markdownregistry.com/api/v1/resolve?ref=vecnode/vncode/research-sources GET https://markdownregistry.com/api/v1/blob/c43b6e4a482c340a055ef601a813669da506966f60727ecd9f24abc98ca8735a
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.