Habilidades personwise-end-user-software-training

📦

personwise-end-user-software-training

Name: personwise-end-user-software-training
Author: personwiseai

Revisión del contenido r1 Riesgo alto 🌐 Acceso a red⚙️ Comandos externos📁 Acceso al sistema de archivos

Build End-User Software Training

Software training often becomes outdated or invents unsupported interface details. This skill builds grounded PersonWise courses from supplied guides and documented workflows.

Compatible con: Claude Codex Code(CC)

⚠️ 38 Deficiente

Detente y solicita confirmación antes de instalar.

Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "personwise-end-user-software-training" from https://skillstore.io/skills/personwiseai-personwise-end-user-software-training.md and its manifest at https://skillstore.io/api/skills/personwiseai-personwise-end-user-software-training/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/personwiseai-personwise-end-user-software-training.md Manifest firmado GET /api/skills/personwiseai-personwise-end-user-software-training/manifest Lockfile firmado GET /api/skills/personwiseai-personwise-end-user-software-training/lockfile

Pruébalo

Usando "personwise-end-user-software-training". Create private CRM training for new account representatives from our approved user guide.

Resultado esperado:

Resolved course: five private pages for new account representatives.
Coverage: system purpose, navigation, account updates, documented mistakes, and support.
Evidence: selected guide processed successfully and each review checkpoint passed.
Delivery: login-required course link with current run and project identifiers.

Usando "personwise-end-user-software-training". Build materials-only ERP training from the two selected manuals and share it with our implementation team.

Resultado esperado:

Grounding: both manuals retained as required sources.
Course: role-specific workflow steps with no unsupported interface details.
Review: outline, script, and required slide images checked.
Delivery: playable link-access course for the implementation team.

Usando "personwise-end-user-software-training". Resume the paused course and fix any unsupported steps before publication.

Resultado esperado:

The paused run was reviewed against its sources, corrected with one bounded revision, rechecked, and published only after playable state was confirmed.

Auditoría de seguridad

Riesgo alto

v1 • 5/8/2026 Abrir el informe versionado

Most static findings are false positives caused by Markdown backticks, defensive installer checks, and signed descriptor data. The fixed release URLs are genuine network exposure, and semantic review found material risks involving an opaque executable, response-provided update commands, external document uploads, and credit consumption.

Archivos escaneados

650

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (4)

Alto

SKILL.md:74-80 assets/bootstrap.sh:128-165 assets/bootstrap.ps1:43-92

Opaque Third-Party Executable Installation

The skill asks agents to download and install a PersonWise executable that is unavailable for source review here. It also suppresses normal-path discussion of signing and reputation.

The skill instruction and both installers directly show the approved download, hash verification, and local installation flow. The downloaded binary is not auditable in these files.

Alto

SKILL.md:109-117 SKILL.md:120-125

Service-Provided Update Command Execution

The skill directs agents to run an exact action command returned through the PersonWise update response. A compromised response could supply unsafe command text.

The instructions explicitly require executing the returned action after approval. They do not require parsing it into an allowlisted executable and validated argument set.

Alto

SKILL.md:140-145 SKILL.md:199-207

External Upload of Training Materials

Named or selected training documents are treated as authorized for upload to PersonWise without distinct upload confirmation. These files may contain internal procedures or screenshots.

The workflow explicitly treats selected files as preauthorized and sends them through source add. The destination is the external PersonWise service described by the skill.

Medio

SKILL.md:134-138 SKILL.md:163-171

Course Credits Consumed Without Separate Confirmation

A course request is treated as authorization to consume existing credits, which may have financial value. The skill explicitly tells the agent not to ask again.

The authorization rule directly permits existing-credit use from a general creation request. Readiness checks prevent unavailable credit use but do not obtain transaction-specific consent.

Elementos de revisión de capacidades (2)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Bajo

assets/bootstrap.ps1:43

Hardcoded URL

$request = [Net.Http.HttpRequestMessage]::new([Net.Http.HttpMethod]::Get, "https://releases.personwi

The installer downloads a PersonWise executable from a fixed HTTPS release host. Checksums reduce tampering risk, but the external download is genuine network and supply-chain exposure.

Bajo

assets/bootstrap.sh:132

Hardcoded URL

url="https://releases.personwise.ai/cli/v1.1.6/$artifact"

The installer downloads a PersonWise executable from a fixed HTTPS release host. Checksums reduce tampering risk, but the external download is genuine network and supply-chain exposure.

Factores de riesgo

🌐 Acceso a red (2)

assets/bootstrap.ps1:43 assets/bootstrap.sh:132

⚙️ Comandos externos (50)

📁 Acceso al sistema de archivos (7)

assets/bootstrap.sh:81 assets/bootstrap.sh:83 assets/bootstrap.sh:128 assets/bootstrap.sh:16 assets/bootstrap.sh:18 assets/bootstrap.sh:128 assets/bootstrap.sh:180

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/personwiseai-personwise-end-user-software-training/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/personwiseai-personwise-end-user-software-training/security.svg)](https://skillstore.io/skills/personwiseai-personwise-end-user-software-training?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/personwiseai-personwise-end-user-software-training?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/personwiseai-personwise-end-user-software-training/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/personwiseai-personwise-end-user-software-training.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

personwiseai. (2026). personwise-end-user-software-training security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/personwiseai-personwise-end-user-software-training/audits/1

Cita BibTeX

@techreport{personwiseai-personwiseai-personwise-end-user-software-training-2026,
  author = {personwiseai},
  title = {personwise-end-user-software-training security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/personwiseai-personwise-end-user-software-training/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "personwise-end-user-software-training security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "personwiseai"
date-released: "2026-08-05"
url: "https://skillstore.io/skills/personwiseai-personwise-end-user-software-training/audits/1"
identifiers:
  - type: other
    value: "skillstore:personwiseai-personwise-end-user-software-training:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Train CRM Users

Convert approved CRM guides into a practical course covering navigation, core workflows, common errors, and support paths.

Support ERP Adoption

Build role-specific ERP training from internal procedures while preserving documented steps and version limits.

Standardize Team Training

Create a repeatable software course from current manuals, review each checkpoint, and publish with controlled access.

Prueba estos prompts

Create Basic Software Training

Build end-user training for [software] from the attached guide. Focus on [workflow] for [learner role] and keep the course private.

Create Role-Based CRM Training

Create a [page count]-page CRM course for [role] using these guides. Cover [tasks], documented mistakes, recovery steps, and support resources.

Build Materials-Only ERP Training

Create ERP end-user training using only the selected documents. Name the taught version, verify every click path, review images, and publish by link.

Resume and Refine a Course

Resume PersonWise run [run ID]. Review fresh state and sources, correct unsupported content, inspect changed slides, then complete the requested access target.

Mejores prácticas

Provide current guides, exact software versions, learner roles, and required workflows.
Choose materials-only mode when every course statement must come from supplied documents.
Review the final access mode and course link before distributing training.

Evitar

Do not request invented screens, permissions, features, or click paths.
Do not use this skill for administrator setup or developer documentation.
Do not upload unapproved local files or publish beyond the requested audience.

Preguntas frecuentes

What source materials work best?

Current user guides, process documents, approved screenshots, and task instructions work best. Sources should identify the software version and intended learner.

Can it create training without documents?

Yes, it can use an open topic workflow. Strict software instructions remain safest when supported by supplied materials.

Does it support CRM and ERP systems?

Yes. It supports end-user CRM and ERP training when the request identifies learner tasks and provides reliable product guidance.

Does it require PersonWise?

Yes. Course creation requires the PersonWise CLI, hosted service, browser authentication, and sufficient account credits.

Can learners ask questions during the course?

Yes. PersonWise courses can present through a digital human and answer voice questions grounded in the course content.

Can the course be shared publicly?

The skill supports private and link access. It changes access only when requested and reports the final link type clearly.