المهارات personwise-end-user-software-training

📦

personwise-end-user-software-training

Name: personwise-end-user-software-training
Author: personwiseai

مراجعة المحتوى r1 مخاطر عالية 🌐 الوصول إلى الشبكة⚙️ الأوامر الخارجية📁 الوصول إلى نظام الملفات

Build End-User Software Training

Software training often becomes outdated or invents unsupported interface details. This skill builds grounded PersonWise courses from supplied guides and documented workflows.

يدعم: Claude Codex Code(CC)

⚠️ 38 ضعيف

توقف واطلب التأكيد قبل التثبيت.

راجع الخطة واحصل على موافقة صريحة من المستخدم قبل تغيير الملفات.

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل

Review the Skillstore skill "personwise-end-user-software-training" from https://skillstore.io/skills/personwiseai-personwise-end-user-software-training.md and its manifest at https://skillstore.io/api/skills/personwiseai-personwise-end-user-software-training/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

تفاصيل Markdown GET /skills/personwiseai-personwise-end-user-software-training.md manifest موقَّع GET /api/skills/personwiseai-personwise-end-user-software-training/manifest lockfile موقَّع GET /api/skills/personwiseai-personwise-end-user-software-training/lockfile

اختبرها

جارٍ استخدام "personwise-end-user-software-training". Create private CRM training for new account representatives from our approved user guide.

النتيجة المتوقعة:

Resolved course: five private pages for new account representatives.
Coverage: system purpose, navigation, account updates, documented mistakes, and support.
Evidence: selected guide processed successfully and each review checkpoint passed.
Delivery: login-required course link with current run and project identifiers.

جارٍ استخدام "personwise-end-user-software-training". Build materials-only ERP training from the two selected manuals and share it with our implementation team.

النتيجة المتوقعة:

Grounding: both manuals retained as required sources.
Course: role-specific workflow steps with no unsupported interface details.
Review: outline, script, and required slide images checked.
Delivery: playable link-access course for the implementation team.

جارٍ استخدام "personwise-end-user-software-training". Resume the paused course and fix any unsupported steps before publication.

النتيجة المتوقعة:

The paused run was reviewed against its sources, corrected with one bounded revision, rechecked, and published only after playable state was confirmed.

التدقيق الأمني

مخاطر عالية

v1 • ٥‏/٨‏/٢٠٢٦ فتح التقرير المرتبط بالإصدار

Most static findings are false positives caused by Markdown backticks, defensive installer checks, and signed descriptor data. The fixed release URLs are genuine network exposure, and semantic review found material risks involving an opaque executable, response-provided update commands, external document uploads, and credit consumption.

الملفات التي تم فحصها

650

الأسطر التي تم تحليلها

عناصر المراجعة

تم تجاهل الإيجابيات الكاذبة

مخاوف أمنية مؤكدة (4)

مرتفع

SKILL.md:74-80 assets/bootstrap.sh:128-165 assets/bootstrap.ps1:43-92

Opaque Third-Party Executable Installation

The skill asks agents to download and install a PersonWise executable that is unavailable for source review here. It also suppresses normal-path discussion of signing and reputation.

The skill instruction and both installers directly show the approved download, hash verification, and local installation flow. The downloaded binary is not auditable in these files.

مرتفع

SKILL.md:109-117 SKILL.md:120-125

Service-Provided Update Command Execution

The skill directs agents to run an exact action command returned through the PersonWise update response. A compromised response could supply unsafe command text.

The instructions explicitly require executing the returned action after approval. They do not require parsing it into an allowlisted executable and validated argument set.

مرتفع

SKILL.md:140-145 SKILL.md:199-207

External Upload of Training Materials

Named or selected training documents are treated as authorized for upload to PersonWise without distinct upload confirmation. These files may contain internal procedures or screenshots.

The workflow explicitly treats selected files as preauthorized and sends them through source add. The destination is the external PersonWise service described by the skill.

متوسط

SKILL.md:134-138 SKILL.md:163-171

Course Credits Consumed Without Separate Confirmation

A course request is treated as authorization to consume existing credits, which may have financial value. The skill explicitly tells the agent not to ask again.

The authorization rule directly permits existing-credit use from a general creation request. Readiness checks prevent unavailable credit use but do not obtain transaction-specific consent.

عناصر مراجعة القدرات (2)

هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.

منخفض

assets/bootstrap.ps1:43

Hardcoded URL

$request = [Net.Http.HttpRequestMessage]::new([Net.Http.HttpMethod]::Get, "https://releases.personwi

The installer downloads a PersonWise executable from a fixed HTTPS release host. Checksums reduce tampering risk, but the external download is genuine network and supply-chain exposure.

منخفض

assets/bootstrap.sh:132

Hardcoded URL

url="https://releases.personwise.ai/cli/v1.1.6/$artifact"

The installer downloads a PersonWise executable from a fixed HTTPS release host. Checksums reduce tampering risk, but the external download is genuine network and supply-chain exposure.

عوامل الخطر

🌐 الوصول إلى الشبكة (2)

assets/bootstrap.ps1:43 assets/bootstrap.sh:132

⚙️ الأوامر الخارجية (50)

📁 الوصول إلى نظام الملفات (7)

assets/bootstrap.sh:81 assets/bootstrap.sh:83 assets/bootstrap.sh:128 assets/bootstrap.sh:16 assets/bootstrap.sh:18 assets/bootstrap.sh:128 assets/bootstrap.sh:180

دقّقه: codex

شارك واستشهد بهذا التقرير

شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.

فتح التقرير المرتبط بالإصدار

نسخ رابط التقرير

https://skillstore.io/skills/personwiseai-personwise-end-user-software-training/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

شارة Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/personwiseai-personwise-end-user-software-training/security.svg)](https://skillstore.io/skills/personwiseai-personwise-end-user-software-training?utm_source=security_passport_badge)

شارة HTML

<a href="https://skillstore.io/skills/personwiseai-personwise-end-user-software-training?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/personwiseai-personwise-end-user-software-training/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

بطاقة قابلة للتضمين

<iframe src="https://skillstore.io/embed/skills/personwiseai-personwise-end-user-software-training.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

الاستشهادات الأكاديمية (APA · BibTeX · CFF)

اقتباس APA

personwiseai. (2026). personwise-end-user-software-training security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/personwiseai-personwise-end-user-software-training/audits/1

اقتباس BibTeX

@techreport{personwiseai-personwiseai-personwise-end-user-software-training-2026,
  author = {personwiseai},
  title = {personwise-end-user-software-training security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/personwiseai-personwise-end-user-software-training/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "personwise-end-user-software-training security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "personwiseai"
date-released: "2026-08-05"
url: "https://skillstore.io/skills/personwiseai-personwise-end-user-software-training/audits/1"
identifiers:
  - type: other
    value: "skillstore:personwiseai-personwise-end-user-software-training:audit:1"
    description: "Skillstore immutable audit report identifier"

تقييم Skillstore

سبب هذا التقييم موثوقية الأدلة: متوسط

الهندسة المعمارية

قابلية الصيانة

المحتوى

المجتمع

الامتثال للمواصفات

ما الذي يمكنك بناؤه

Train CRM Users

Convert approved CRM guides into a practical course covering navigation, core workflows, common errors, and support paths.

Support ERP Adoption

Build role-specific ERP training from internal procedures while preserving documented steps and version limits.

Standardize Team Training

Create a repeatable software course from current manuals, review each checkpoint, and publish with controlled access.

جرّب هذه الموجّهات

Create Basic Software Training

Build end-user training for [software] from the attached guide. Focus on [workflow] for [learner role] and keep the course private.

Create Role-Based CRM Training

Create a [page count]-page CRM course for [role] using these guides. Cover [tasks], documented mistakes, recovery steps, and support resources.

Build Materials-Only ERP Training

Create ERP end-user training using only the selected documents. Name the taught version, verify every click path, review images, and publish by link.

Resume and Refine a Course

Resume PersonWise run [run ID]. Review fresh state and sources, correct unsupported content, inspect changed slides, then complete the requested access target.

أفضل الممارسات

Provide current guides, exact software versions, learner roles, and required workflows.
Choose materials-only mode when every course statement must come from supplied documents.
Review the final access mode and course link before distributing training.

تجنب

Do not request invented screens, permissions, features, or click paths.
Do not use this skill for administrator setup or developer documentation.
Do not upload unapproved local files or publish beyond the requested audience.

الأسئلة المتكررة

What source materials work best?

Current user guides, process documents, approved screenshots, and task instructions work best. Sources should identify the software version and intended learner.

Can it create training without documents?

Yes, it can use an open topic workflow. Strict software instructions remain safest when supported by supplied materials.

Does it support CRM and ERP systems?

Yes. It supports end-user CRM and ERP training when the request identifies learner tasks and provides reliable product guidance.

Does it require PersonWise?

Yes. Course creation requires the PersonWise CLI, hosted service, browser authentication, and sufficient account credits.

Can learners ask questions during the course?

Yes. PersonWise courses can present through a digital human and answer voice questions grounded in the course content.

Can the course be shared publicly?

The skill supports private and link access. It changes access only when requested and reports the final link type clearly.