Wei Cross Research

Cross-validate research answers by querying multiple LLMs in parallel with judge-based synthesis. Reduces hallucination and surfaces model disagreements for...

What to consider before installing: 1) Metadata mismatch: The registry summary claims no required env vars and 'instruction-only', but SKILL.md and the code require Bun and an OPENROUTER_API_KEY (DASHSCOPE_API_KEY optional) and include runnable TypeScript. Treat the skill as code you will run, not a text-only recipe. 2) Secrets: The skill needs provider API keys. Only provide API keys you trust the provider with and consider using a dedicated account/key with limited billing/permissions. 3) Review clients: The repo contains clients for OpenRouter and Bailian (DashScope). If you are concerned about exfiltration or unexpected endpoints, read scripts/clients/* to confirm which API bases are called and whether any additional telemetry or unexpected endpoints are used. 4) Local files: The agent writes intermediate/ and reports/ files. If queries or model outputs contain sensitive data, these will be stored locally — remove or secure those directories if needed. 5) Run in isolation first: Execute in an isolated environment (VM/container) and inspect network traffic or logs during a test run if possible. Use test API keys and low-privilege accounts initially. 6) Deployment choice: If you do not want the skill to call many external models, edit config.json to remove/untrustworthy providers or reduce max_models before use. If you want, I can: (a) inspect the client files to list exact HTTP endpoints used and any headers/telemetry, (b) point out the lines that read env vars and write files, or (c) suggest a minimal-safe config.json that limits providers and logging.