Skills personwise-end-user-software-training

📦

personwise-end-user-software-training

Name: personwise-end-user-software-training
Author: personwiseai

Content revision r1 High Risk 🌐 Network access⚙️ External commands📁 Filesystem access

Build End-User Software Training

Software training often becomes outdated or invents unsupported interface details. This skill builds grounded PersonWise courses from supplied guides and documented workflows.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "personwise-end-user-software-training" from https://skillstore.io/skills/personwiseai-personwise-end-user-software-training.md and its manifest at https://skillstore.io/api/skills/personwiseai-personwise-end-user-software-training/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/personwiseai-personwise-end-user-software-training.md Signed manifest GET /api/skills/personwiseai-personwise-end-user-software-training/manifest Signed lockfile GET /api/skills/personwiseai-personwise-end-user-software-training/lockfile

Test it

Using "personwise-end-user-software-training". Create private CRM training for new account representatives from our approved user guide.

Expected outcome:

Resolved course: five private pages for new account representatives.
Coverage: system purpose, navigation, account updates, documented mistakes, and support.
Evidence: selected guide processed successfully and each review checkpoint passed.
Delivery: login-required course link with current run and project identifiers.

Using "personwise-end-user-software-training". Build materials-only ERP training from the two selected manuals and share it with our implementation team.

Expected outcome:

Grounding: both manuals retained as required sources.
Course: role-specific workflow steps with no unsupported interface details.
Review: outline, script, and required slide images checked.
Delivery: playable link-access course for the implementation team.

Using "personwise-end-user-software-training". Resume the paused course and fix any unsupported steps before publication.

Expected outcome:

The paused run was reviewed against its sources, corrected with one bounded revision, rechecked, and published only after playable state was confirmed.

Security Audit

High Risk

v1 • 8/5/2026 Open versioned report

Most static findings are false positives caused by Markdown backticks, defensive installer checks, and signed descriptor data. The fixed release URLs are genuine network exposure, and semantic review found material risks involving an opaque executable, response-provided update commands, external document uploads, and credit consumption.

Files scanned

650

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (4)

High

SKILL.md:74-80 assets/bootstrap.sh:128-165 assets/bootstrap.ps1:43-92

Opaque Third-Party Executable Installation

The skill asks agents to download and install a PersonWise executable that is unavailable for source review here. It also suppresses normal-path discussion of signing and reputation.

The skill instruction and both installers directly show the approved download, hash verification, and local installation flow. The downloaded binary is not auditable in these files.

High

SKILL.md:109-117 SKILL.md:120-125

Service-Provided Update Command Execution

The skill directs agents to run an exact action command returned through the PersonWise update response. A compromised response could supply unsafe command text.

The instructions explicitly require executing the returned action after approval. They do not require parsing it into an allowlisted executable and validated argument set.

High

SKILL.md:140-145 SKILL.md:199-207

External Upload of Training Materials

Named or selected training documents are treated as authorized for upload to PersonWise without distinct upload confirmation. These files may contain internal procedures or screenshots.

The workflow explicitly treats selected files as preauthorized and sends them through source add. The destination is the external PersonWise service described by the skill.

Medium

SKILL.md:134-138 SKILL.md:163-171

Course Credits Consumed Without Separate Confirmation

A course request is treated as authorization to consume existing credits, which may have financial value. The skill explicitly tells the agent not to ask again.

The authorization rule directly permits existing-credit use from a general creation request. Readiness checks prevent unavailable credit use but do not obtain transaction-specific consent.

Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low

assets/bootstrap.ps1:43

Hardcoded URL

$request = [Net.Http.HttpRequestMessage]::new([Net.Http.HttpMethod]::Get, "https://releases.personwi

The installer downloads a PersonWise executable from a fixed HTTPS release host. Checksums reduce tampering risk, but the external download is genuine network and supply-chain exposure.

Low

assets/bootstrap.sh:132

Hardcoded URL

url="https://releases.personwise.ai/cli/v1.1.6/$artifact"

The installer downloads a PersonWise executable from a fixed HTTPS release host. Checksums reduce tampering risk, but the external download is genuine network and supply-chain exposure.

Risk Factors

🌐 Network access (2)

assets/bootstrap.ps1:43 assets/bootstrap.sh:132

⚙️ External commands (50)

📁 Filesystem access (7)

assets/bootstrap.sh:81 assets/bootstrap.sh:83 assets/bootstrap.sh:128 assets/bootstrap.sh:16 assets/bootstrap.sh:18 assets/bootstrap.sh:128 assets/bootstrap.sh:180

Audited by: codex

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/personwiseai-personwise-end-user-software-training/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/personwiseai-personwise-end-user-software-training/security.svg)](https://skillstore.io/skills/personwiseai-personwise-end-user-software-training?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/personwiseai-personwise-end-user-software-training?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/personwiseai-personwise-end-user-software-training/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/personwiseai-personwise-end-user-software-training.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

personwiseai. (2026). personwise-end-user-software-training security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/personwiseai-personwise-end-user-software-training/audits/1

BibTeX citation

@techreport{personwiseai-personwiseai-personwise-end-user-software-training-2026,
  author = {personwiseai},
  title = {personwise-end-user-software-training security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/personwiseai-personwise-end-user-software-training/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "personwise-end-user-software-training security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "personwiseai"
date-released: "2026-08-05"
url: "https://skillstore.io/skills/personwiseai-personwise-end-user-software-training/audits/1"
identifiers:
  - type: other
    value: "skillstore:personwiseai-personwise-end-user-software-training:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Train CRM Users

Convert approved CRM guides into a practical course covering navigation, core workflows, common errors, and support paths.

Support ERP Adoption

Build role-specific ERP training from internal procedures while preserving documented steps and version limits.

Standardize Team Training

Create a repeatable software course from current manuals, review each checkpoint, and publish with controlled access.

Try These Prompts

Create Basic Software Training

Build end-user training for [software] from the attached guide. Focus on [workflow] for [learner role] and keep the course private.

Create Role-Based CRM Training

Create a [page count]-page CRM course for [role] using these guides. Cover [tasks], documented mistakes, recovery steps, and support resources.

Build Materials-Only ERP Training

Create ERP end-user training using only the selected documents. Name the taught version, verify every click path, review images, and publish by link.

Resume and Refine a Course

Resume PersonWise run [run ID]. Review fresh state and sources, correct unsupported content, inspect changed slides, then complete the requested access target.

Best Practices

Provide current guides, exact software versions, learner roles, and required workflows.
Choose materials-only mode when every course statement must come from supplied documents.
Review the final access mode and course link before distributing training.

Avoid

Do not request invented screens, permissions, features, or click paths.
Do not use this skill for administrator setup or developer documentation.
Do not upload unapproved local files or publish beyond the requested audience.

Frequently Asked Questions

What source materials work best?

Current user guides, process documents, approved screenshots, and task instructions work best. Sources should identify the software version and intended learner.

Can it create training without documents?

Yes, it can use an open topic workflow. Strict software instructions remain safest when supported by supplied materials.

Does it support CRM and ERP systems?

Yes. It supports end-user CRM and ERP training when the request identifies learner tasks and provides reliable product guidance.

Does it require PersonWise?

Yes. Course creation requires the PersonWise CLI, hosted service, browser authentication, and sufficient account credits.

Can learners ask questions during the course?

Yes. PersonWise courses can present through a digital human and answer voice questions grounded in the course content.

Can the course be shared publicly?

The skill supports private and link access. It changes access only when requested and reports the final link type clearly.