Skills personwise-report-briefing

📦

personwise-report-briefing

Name: personwise-report-briefing
Author: personwiseai

Content revision r1 Medium Risk 🌐 Network access⚙️ External commands📁 Filesystem access

Transform Reports Into Interactive Briefings

Long reports are difficult to present accurately and invite limited audience interaction. This skill converts supplied sources into grounded, interactive PersonWise briefing courses.

Supports: Claude Codex Code(CC)

⚠️ 50 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "personwise-report-briefing" from https://skillstore.io/skills/personwiseai-personwise-report-briefing.md and its manifest at https://skillstore.io/api/skills/personwiseai-personwise-report-briefing/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/personwiseai-personwise-report-briefing.md Signed manifest GET /api/skills/personwiseai-personwise-report-briefing/manifest Signed lockfile GET /api/skills/personwiseai-personwise-report-briefing/lockfile

Test it

Using "personwise-report-briefing". Create a private five-page briefing from our workforce benchmark report.

Expected outcome:

A private five-page course covering the headline finding, evidence, method, limitations, and discussion. Delivery includes the login-required course link and verified source status.

Using "personwise-report-briefing". Turn two supplied policy reports into an interactive briefing for city leaders.

Expected outcome:

The course distinguishes findings from each report.
Shared conclusions appear only where both sources support them.
Methods, timeframes, and caveats remain attached to each claim.

Using "personwise-report-briefing". Publish our benchmark briefing for anyone with the link.

Expected outcome:

The completed course uses link access and returns the verified public share link. The final report states the page count, source status, and review result.

Security Audit

Medium Risk

v1 • 8/5/2026 Open versioned report

The 142 static alerts are false positives: documented backticks do not execute code, installer operations are bounded, and the encoded descriptor contains expected signed metadata. Three medium risks remain: third-party document upload, automatic use of existing course credits, and disabled native signature verification for Windows and macOS binaries. No prompt injection attempt or concealed executable payload was found.

Files scanned

647

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (3)

Medium

SKILL.md:196-204 SKILL.md:267-274

Selected Documents Are Uploaded to a Third-Party Service

The workflow uploads user-selected reports and images to PersonWise for processing. Sensitive documents therefore leave the local environment, even though discovered files require separate approval.

SKILL.md directly instructs source upload with source add and permits selected images as references. The external transfer is an explicit part of the workflow.

Medium

SKILL.md:129-135 SKILL.md:158-180

Course Creation Consumes Existing Credits Without Separate Confirmation

The skill treats a creation request as authorization to consume existing course credits and explicitly avoids another confirmation. Implicit invocation can therefore trigger metered account usage.

The authorization section explicitly permits existing-credit use without asking again, and the readiness section creates a durable run after checking the live allowance.

Medium

assets/bootstrap.ps1:9-13 assets/bootstrap.ps1:83-88 assets/bootstrap.sh:50-68 assets/bootstrap.sh:166-173

Native Platform Signature Verification Is Disabled

Windows and macOS installers accept pinned executable hashes while native signature requirements remain disabled. Hash pinning limits tampering but does not provide independent platform provenance.

Both installers set native signing to deferred or not required, making the Authenticode and macOS identity checks unreachable for the bundled release.

Risk Factors

🌐 Network access (2)

assets/bootstrap.ps1:43 assets/bootstrap.sh:132

⚙️ External commands (50)

📁 Filesystem access (7)

assets/bootstrap.sh:81 assets/bootstrap.sh:83 assets/bootstrap.sh:128 assets/bootstrap.sh:16 assets/bootstrap.sh:18 assets/bootstrap.sh:128 assets/bootstrap.sh:180

Audited by: codex

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/personwiseai-personwise-report-briefing/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/personwiseai-personwise-report-briefing/security.svg)](https://skillstore.io/skills/personwiseai-personwise-report-briefing?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/personwiseai-personwise-report-briefing?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/personwiseai-personwise-report-briefing/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/personwiseai-personwise-report-briefing.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

personwiseai. (2026). personwise-report-briefing security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/personwiseai-personwise-report-briefing/audits/1

BibTeX citation

@techreport{personwiseai-personwiseai-personwise-report-briefing-2026,
  author = {personwiseai},
  title = {personwise-report-briefing security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/personwiseai-personwise-report-briefing/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "personwise-report-briefing security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "personwiseai"
date-released: "2026-08-05"
url: "https://skillstore.io/skills/personwiseai-personwise-report-briefing/audits/1"
identifiers:
  - type: other
    value: "skillstore:personwiseai-personwise-report-briefing:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Brief Research Leadership

Convert a whitepaper into an interactive executive briefing that preserves methods, caveats, and key evidence.

Present Policy Findings

Turn a policy report into a source-grounded presentation with clear limits and audience questions.

Teach Benchmark Results

Build a training course that explains benchmark findings and checks accurate recall.

Try These Prompts

Create a Basic Report Briefing

Create a private interactive briefing from [report]. Focus on the main findings, method, and stated limitations.

Adapt the Briefing for an Audience

Create a [page count]-page briefing from [report] for [audience]. Emphasize [priority] while preserving all relevant caveats.

Compare Findings Across Sources

Create a materials-only briefing from [reports]. Separate each source's findings, identify supported agreements, and preserve differences in method and scope.

Build and Publish an Advanced Briefing

Create a [page count]-page interactive course from [sources] for [audience]. Review every checkpoint, correct unsupported claims, and publish with [access mode].