Skills personwise-interactive-product-explainer

📦

personwise-interactive-product-explainer

Name: personwise-interactive-product-explainer
Author: personwiseai

Content revision r1 High Risk 🌐 Network access⚙️ External commands📁 Filesystem access

Build a Source-Grounded Interactive Product Explainer

Product teams need clear explainers without unsupported claims or invented interfaces. This skill creates an askable PersonWise experience from verified product materials.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "personwise-interactive-product-explainer" from https://skillstore.io/skills/personwiseai-personwise-interactive-product-explainer.md and its manifest at https://skillstore.io/api/skills/personwiseai-personwise-interactive-product-explainer/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/personwiseai-personwise-interactive-product-explainer.md Signed manifest GET /api/skills/personwiseai-personwise-interactive-product-explainer/manifest Signed lockfile GET /api/skills/personwiseai-personwise-interactive-product-explainer/lockfile

Test it

Using "personwise-interactive-product-explainer". Create a private explainer from our verified launch brief and current pricing page.

Expected outcome:

Teaching arc: audience problem, product promise, verified workflow, value and limits, approved next step.
Source boundary: launch brief and current pricing page only.
Access: private editor link, available after login.

Using "personwise-interactive-product-explainer". Build an embeddable product explainer using our documentation and supplied screenshots.

Expected outcome:

Claims were checked against the documentation, with unsupported statements removed or qualified.
Supplied screenshots were retained as exact references, and generated slides passed visual review.
Access: link-enabled and ready for the requested embed workflow.

Using "personwise-interactive-product-explainer". Explain our product, but the security and integration details are not documented.

Expected outcome:

The explainer omits security and integration claims and lists both topics as open questions for the product owner.

Security Audit

High Risk

v1 • 8/5/2026 Open versioned report

Two static network findings are confirmed because the installers download executable archives, although pinned sizes and hashes reduce tampering risk. The other static findings are safe shell, filesystem, Markdown, or signed-data patterns. Semantic review found remote-provided update command execution, missing native signature enforcement, and external source uploads.

Files scanned

676

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (3)

High

references/workflow.md:35-43 references/workflow.md:46-50

Remote-Provided Update Command Execution

The workflow tells the agent to execute an action command returned by the PersonWise service after approval. It does not require strict parsing or argument allowlisting.

The instructions explicitly say to run the exact returned action. User approval and the fixed service reduce exposure, but they do not validate command structure.

Medium

assets/bootstrap.sh:54-68 assets/bootstrap.ps1:10-12 assets/bootstrap.ps1:85-88

Native Binary Signature Verification Disabled

The installers label macOS and Windows signatures as deferred and do not require native publisher verification. Embedded hashes protect downloads but do not independently establish publisher identity.

Both installers explicitly disable required native signature checks for distributed binaries. The remaining pinned hashes are visible but are controlled by the same skill package.

Medium

references/workflow.md:105-111 references/product-grounding.md:31-36

External Upload of Product Materials

The workflow uploads selected product documents and images to PersonWise without a separate upload confirmation. Confidential product materials could leave the local environment.

The instructions directly require uploads to the authenticated PersonWise service. Files are user-selected, but the workflow explicitly says no extra approval is needed.

Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low

assets/bootstrap.ps1:43

Hardcoded URL

$request = [Net.Http.HttpRequestMessage]::new([Net.Http.HttpMethod]::Get, "https://releases.personwi

The PowerShell installer downloads an executable archive from the fixed PersonWise release host. Size and SHA-256 checks reduce tampering risk, but the external binary download is real.

Low

assets/bootstrap.sh:132

Hardcoded URL

url="https://releases.personwise.ai/cli/v1.1.6/$artifact"

The shell installer downloads a platform executable archive from the fixed PersonWise release host. TLS, size, archive-entry, and checksum checks mitigate but do not remove the network dependency.

Risk Factors

🌐 Network access (2)

assets/bootstrap.ps1:43 assets/bootstrap.sh:132

⚙️ External commands (28)

📁 Filesystem access (7)

assets/bootstrap.sh:81 assets/bootstrap.sh:83 assets/bootstrap.sh:128 assets/bootstrap.sh:16 assets/bootstrap.sh:18 assets/bootstrap.sh:128 assets/bootstrap.sh:180

Audited by: codex

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/personwiseai-personwise-interactive-product-explainer/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/personwiseai-personwise-interactive-product-explainer/security.svg)](https://skillstore.io/skills/personwiseai-personwise-interactive-product-explainer?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/personwiseai-personwise-interactive-product-explainer?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/personwiseai-personwise-interactive-product-explainer/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/personwiseai-personwise-interactive-product-explainer.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

personwiseai. (2026). personwise-interactive-product-explainer security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/personwiseai-personwise-interactive-product-explainer/audits/1

BibTeX citation

@techreport{personwiseai-personwiseai-personwise-interactive-product-explainer-2026,
  author = {personwiseai},
  title = {personwise-interactive-product-explainer security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/personwiseai-personwise-interactive-product-explainer/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "personwise-interactive-product-explainer security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "personwiseai"
date-released: "2026-08-05"
url: "https://skillstore.io/skills/personwiseai-personwise-interactive-product-explainer/audits/1"
identifiers:
  - type: other
    value: "skillstore:personwiseai-personwise-interactive-product-explainer:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Prepare a Launch Explainer

Turn verified launch materials into a concise, askable product introduction for a launch page.

Replace a Static Product Demo

Create an interactive product walkthrough that explains documented workflows without inventing interface details.

Build a Sales Follow-Up

Create a grounded explainer that summarizes fit, use cases, proof, limitations, and the approved next step.

Try These Prompts

Create a Basic Product Explainer

Create a private interactive explainer for [product]. Use only the attached product brief and identify any missing evidence.

Build a Launch Page Companion

Create an askable explainer for [launch]. Ground every claim in these documents and use [URL] as the approved next step.

Create a Strictly Grounded Walkthrough

Create a [slide count]-page explainer from the selected files. Preserve documented limitations and exclude unsupported pricing, security, integration, and performance claims.

Publish an Embedded Product Story

Create and review an embedded explainer for [audience]. Audit every sentence against the source ledger and regenerate all visually misleading slides before publishing.

Best Practices

Provide current first-party materials and clearly identify the authoritative source for each time-sensitive claim.
State the intended audience, next step, and access target before course creation.
Review confidential files before authorizing upload to PersonWise.

Avoid

Do not ask the skill to invent interface screens, customer proof, pricing, integrations, or performance results.
Do not use broad research when the explainer must stay within supplied documents.
Do not request public access when the source materials contain confidential information.