المهارات personwise-partner-training

📦

personwise-partner-training

Name: personwise-partner-training
Author: personwiseai

مراجعة المحتوى r1 مخاطر عالية 🌐 الوصول إلى الشبكة⚙️ الأوامر الخارجية📁 الوصول إلى نظام الملفات

Build Grounded Partner Training Courses

Partner teams need consistent onboarding without unsupported commercial claims. This skill builds a source-grounded, interactive PersonWise course with review checkpoints, access controls, and learner questions.

يدعم: Claude Codex Code(CC)

⚠️ 38 ضعيف

توقف واطلب التأكيد قبل التثبيت.

راجع الخطة واحصل على موافقة صريحة من المستخدم قبل تغيير الملفات.

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل

Review the Skillstore skill "personwise-partner-training" from https://skillstore.io/skills/personwiseai-personwise-partner-training.md and its manifest at https://skillstore.io/api/skills/personwiseai-personwise-partner-training/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

تفاصيل Markdown GET /skills/personwiseai-personwise-partner-training.md manifest موقَّع GET /api/skills/personwiseai-personwise-partner-training/manifest lockfile موقَّع GET /api/skills/personwiseai-personwise-partner-training/lockfile

اختبرها

جارٍ استخدام "personwise-partner-training". Create a five-page private onboarding course from our partner handbook.

النتيجة المتوقعة:

Resolved format: five-page private partner onboarding course.
Teaching arc: partnership, product story, deal flow, approved claims, and escalation.
Evidence: supplied handbook only, with unsupported commercial questions routed to the partner team.

جارٍ استخدام "personwise-partner-training". Turn our reseller guide into training with a short knowledge check.

النتيجة المتوقعة:

Course structure: reseller value, customer narrative, handoff process, branding limits, and support contacts.
Knowledge check: scenario questions based only on approved guide content.
Delivery: interactive presenter with source-grounded learner questions.

جارٍ استخدام "personwise-partner-training". Update the existing course and give partners a shareable link.

النتيجة المتوقعة:

The course was reviewed against current sources, updated at supported fields, published with link access, and checked for playability.

التدقيق الأمني

مخاطر عالية

v1 • ٥‏/٨‏/٢٠٢٦ فتح التقرير المرتبط بالإصدار

Two hardcoded release URLs are confirmed network and software supply-chain risks, while shell substitutions, Markdown backticks, installer safeguards, and signed descriptor entropy are false positives. Semantic review found third-party executable installation, server-supplied update commands, external document uploads, and implicit course-credit consumption.

الملفات التي تم فحصها

647

الأسطر التي تم تحليلها

عناصر المراجعة

تم تجاهل الإيجابيات الكاذبة

مخاوف أمنية مؤكدة (4)

مرتفع

SKILL.md:71-77 assets/bootstrap.sh:132-165 assets/bootstrap.ps1:43-84

Third-Party Executable Installation and Execution

The workflow installs a closed PersonWise executable into a user executable directory and then uses it for authenticated operations. Hash pinning limits tampering, but reviewers cannot inspect the downloaded binary in this skill package.

The instructions and both installers directly show downloading, verifying, installing, and later invoking the external PersonWise executable.

مرتفع

SKILL.md:106-126

Externally Supplied Update Command Execution

The skill tells the agent to execute an exact update command returned by the PersonWise service. A compromised response could influence local command execution despite the required user approval.

The prose explicitly requires running the returned action command without substitution and provides fallback installation commands.

متوسط

SKILL.md:196-204

External Upload of Partner Materials

The workflow uploads user-selected partner documents to PersonWise and treats selection as upload authorization. Sensitive commercial materials may leave the local environment without a separate destination disclosure.

The source add command and surrounding instructions explicitly direct local files to the external PersonWise workflow.

متوسط

SKILL.md:129-135

Implicit Consumption of Existing Course Credits

A general course-creation request is treated as authorization to consume existing course credits. The skill forbids a separate confirmation before this billable or limited account resource is used.

The authorization section explicitly states that creation consumes required credits without asking again.

عناصر مراجعة القدرات (2)

هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.

منخفض

assets/bootstrap.ps1:43

Hardcoded URL

$request = [Net.Http.HttpRequestMessage]::new([Net.Http.HttpMethod]::Get, "https://releases.personwi

The installer downloads a versioned PersonWise executable archive from an external release server at assets/bootstrap.ps1:43. Pinned size and SHA-256 checks reduce tampering risk, but the network and software supply-chain action is real.

منخفض

assets/bootstrap.sh:132

Hardcoded URL

url="https://releases.personwise.ai/cli/v1.1.6/$artifact"

The installer downloads a versioned PersonWise executable archive from an external release server at assets/bootstrap.sh:132. Pinned size and SHA-256 checks reduce tampering risk, but the network and software supply-chain action is real.

عوامل الخطر

🌐 الوصول إلى الشبكة (2)

assets/bootstrap.ps1:43 assets/bootstrap.sh:132

⚙️ الأوامر الخارجية (50)

📁 الوصول إلى نظام الملفات (7)

assets/bootstrap.sh:81 assets/bootstrap.sh:83 assets/bootstrap.sh:128 assets/bootstrap.sh:16 assets/bootstrap.sh:18 assets/bootstrap.sh:128 assets/bootstrap.sh:180

دقّقه: codex

شارك واستشهد بهذا التقرير

شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.

فتح التقرير المرتبط بالإصدار

نسخ رابط التقرير

https://skillstore.io/skills/personwiseai-personwise-partner-training/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

شارة Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/personwiseai-personwise-partner-training/security.svg)](https://skillstore.io/skills/personwiseai-personwise-partner-training?utm_source=security_passport_badge)

شارة HTML

<a href="https://skillstore.io/skills/personwiseai-personwise-partner-training?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/personwiseai-personwise-partner-training/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

بطاقة قابلة للتضمين

<iframe src="https://skillstore.io/embed/skills/personwiseai-personwise-partner-training.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

الاستشهادات الأكاديمية (APA · BibTeX · CFF)

اقتباس APA

personwiseai. (2026). personwise-partner-training security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/personwiseai-personwise-partner-training/audits/1

اقتباس BibTeX

@techreport{personwiseai-personwiseai-personwise-partner-training-2026,
  author = {personwiseai},
  title = {personwise-partner-training security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/personwiseai-personwise-partner-training/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "personwise-partner-training security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "personwiseai"
date-released: "2026-08-05"
url: "https://skillstore.io/skills/personwiseai-personwise-partner-training/audits/1"
identifiers:
  - type: other
    value: "skillstore:personwiseai-personwise-partner-training:audit:1"
    description: "Skillstore immutable audit report identifier"

تقييم Skillstore

سبب هذا التقييم موثوقية الأدلة: متوسط

الهندسة المعمارية

قابلية الصيانة

المحتوى

المجتمع

الامتثال للمواصفات

ما الذي يمكنك بناؤه

Onboard new channel partners

Turn approved program documents into a private course covering product messaging, deal registration, handoffs, branding rules, and escalation contacts.

Train reseller teams

Create a concise reseller course with approved customer narratives, self-check questions, and clear boundaries for commercial claims.

Publish a controlled program update

Revise an existing course from current materials, review every checkpoint, and release it with the requested access mode.

جرّب هذه الموجّهات

Create a basic partner course

Create a private partner training course from [materials]. Teach [audience] the product story, deal flow, approved claims, and escalation path.

Ground a course in documents

Build a [page count]-page partner onboarding course using only [documents]. Preserve approved terminology and route unsupported commercial questions to [partner team].

Add assessment and visual direction

Create a private reseller course from [materials] for [audience]. Include [assessment type], conceptual deal-flow visuals, and an interactive presenter brief.

Review and publish an existing course

Resume course [project ID]. Verify every source is ready, review outline and script checkpoints, correct unsupported claims, then publish with [access mode].

أفضل الممارسات

Provide current, approved partner materials and identify the factual authority for commercial claims.
Specify the audience, desired page count, assessment needs, language, and access mode before creation.
Review each outline, script, and image checkpoint before advancing or publishing.

تجنب

Do not invent commissions, margins, territories, lead flows, legal status, earnings, portals, or tier structures.
Do not upload agent-discovered files or images without explicit approval.
Do not call private editor links shareable or describe Topics submissions as approved.