Skills personwise-product-first-success

📦

personwise-product-first-success

Name: personwise-product-first-success
Author: personwiseai

Content revision r1 Medium Risk 🌐 Network access⚙️ External commands📁 Filesystem access

Build Product First-Success Courses

New users often stall before reaching a product's first useful result. This skill turns supplied product materials into a grounded, interactive PersonWise quick-start course.

Supports: Claude Codex Code(CC)

📊 65 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "personwise-product-first-success" from https://skillstore.io/skills/personwiseai-personwise-product-first-success.md and its manifest at https://skillstore.io/api/skills/personwiseai-personwise-product-first-success/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/personwiseai-personwise-product-first-success.md Signed manifest GET /api/skills/personwiseai-personwise-product-first-success/manifest Signed lockfile GET /api/skills/personwiseai-personwise-product-first-success/lockfile

Test it

Using "personwise-product-first-success". Create a private five-slide quick-start course from our approved setup guide.

Expected outcome:

Resolved course: five slides, private access, one selected source.
Teaching arc: outcome, prerequisites, guided setup, documented blockers, and result verification.
Final status: playable private course with a sign-in link.

Using "personwise-product-first-success". Turn our manual and troubleshooting article into a shareable first-success course.

Expected outcome:

Both sources were processed before generation continued.
The outline and script were checked for factual support and repeated content.
Final status: playable link-access course with the returned share link.

Using "personwise-product-first-success". Our account supports fewer slides than requested. Create the strongest course that fits.

Expected outcome:

The course was recomposed to the current slide limit while preserving prerequisites, the shortest verified setup path, blocker recovery, and final verification.

Security Audit

Medium Risk

v1 • 8/5/2026 Open versioned report

Two hardcoded release URLs are confirmed low-severity supply-chain exposures because the installers download native executables, although approval and pinned hashes provide strong safeguards. Shell substitutions, filesystem operations, reconnaissance labels, Markdown backticks, and signed high-entropy values are false positives in context. The workflow also uploads selected documents and mutates a PersonWise account, creating a medium privacy and authorization risk.

Files scanned

650

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

SKILL.md:132-145 SKILL.md:199-207

External Document Upload and Account Mutation

The workflow uploads user-selected source files to PersonWise, consumes existing course credits, and may change publication access. These expected operations transfer data and modify an external account.

The skill explicitly treats course requests as authorization to consume credits and selected files as authorized for upload. It also documents source upload commands and external publication targets.

Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low

assets/bootstrap.ps1:43

Hardcoded URL

$request = [Net.Http.HttpRequestMessage]::new([Net.Http.HttpMethod]::Get, "https://releases.personwi

The installer downloads a native executable from a fixed PersonWise HTTPS release URL. Explicit approval, size limits, and pinned hashes reduce risk, but the external binary supply chain remains a real low-severity exposure.

Low

assets/bootstrap.sh:132

Hardcoded URL

url="https://releases.personwise.ai/cli/v1.1.6/$artifact"

Risk Factors

🌐 Network access (2)

assets/bootstrap.ps1:43 assets/bootstrap.sh:132

⚙️ External commands (50)

📁 Filesystem access (7)

assets/bootstrap.sh:81 assets/bootstrap.sh:83 assets/bootstrap.sh:128 assets/bootstrap.sh:16 assets/bootstrap.sh:18 assets/bootstrap.sh:128 assets/bootstrap.sh:180

Audited by: codex

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/personwiseai-personwise-product-first-success/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/personwiseai-personwise-product-first-success/security.svg)](https://skillstore.io/skills/personwiseai-personwise-product-first-success?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/personwiseai-personwise-product-first-success?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/personwiseai-personwise-product-first-success/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/personwiseai-personwise-product-first-success.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

personwiseai. (2026). personwise-product-first-success security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/personwiseai-personwise-product-first-success/audits/1

BibTeX citation

@techreport{personwiseai-personwiseai-personwise-product-first-success-2026,
  author = {personwiseai},
  title = {personwise-product-first-success security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/personwiseai-personwise-product-first-success/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "personwise-product-first-success security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "personwiseai"
date-released: "2026-08-05"
url: "https://skillstore.io/skills/personwiseai-personwise-product-first-success/audits/1"
identifiers:
  - type: other
    value: "skillstore:personwiseai-personwise-product-first-success:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Launch a Customer Quick Start

Convert verified setup documentation into a short course that guides new customers to their first successful result.

Standardize Employee Product Setup

Create a consistent internal onboarding course from approved manuals, screenshots, and troubleshooting guidance.

Reduce Early Support Questions

Build an interactive course that explains documented setup steps and common blockers before users contact support.

Try These Prompts

Create a Basic Quick Start

Build a private first-success course from these supplied setup materials. Guide a new user from signup or unboxing to one verified result.

Add Troubleshooting Guidance

Create a first-success course from these manuals and help articles. Include documented prerequisites, common blockers, fixes, and a final verification step.

Design for a Limited Account

Build a private quick-start course from these sources. Check account readiness, fit the teaching arc within current limits, and preserve essential setup steps.

Create and Publish a Reviewed Course

Create a link-access first-success course from these selected documents and images. Review every checkpoint, correct unsupported claims, verify playability, and return the share link.

Best Practices

Supply current, approved product materials and identify every document or image intended for upload.
State the learner, desired first result, language, access mode, and any required page count.
Review external transfer, credit use, and final visibility before the workflow creates or publishes a course.

Avoid

Do not request unsupported setup details, invented interface screens, or undocumented compatibility claims.
Do not use the course as proof that a learner completed real equipment or safety procedures.
Do not upload agent-discovered files, buy credits, or broaden access without explicit user authorization.