技能 personwise-end-user-software-training

📦

personwise-end-user-software-training

Name: personwise-end-user-software-training
Author: personwiseai

内容修订 r1 高风险 🌐 网络访问⚙️ 外部命令📁 文件系统访问

Build End-User Software Training

Software training often becomes outdated or invents unsupported interface details. This skill builds grounded PersonWise courses from supplied guides and documented workflows.

支持: Claude Codex Code(CC)

⚠️ 38 差

安装前请停下并请求确认。

请审查安装计划，并在更改文件前获得用户明确同意。

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "personwise-end-user-software-training" from https://skillstore.io/skills/personwiseai-personwise-end-user-software-training.md and its manifest at https://skillstore.io/api/skills/personwiseai-personwise-end-user-software-training/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/personwiseai-personwise-end-user-software-training.md 已签名 manifest GET /api/skills/personwiseai-personwise-end-user-software-training/manifest 已签名 lockfile GET /api/skills/personwiseai-personwise-end-user-software-training/lockfile

测试它

正在使用“personwise-end-user-software-training”。 Create private CRM training for new account representatives from our approved user guide.

预期结果:

Resolved course: five private pages for new account representatives.
Coverage: system purpose, navigation, account updates, documented mistakes, and support.
Evidence: selected guide processed successfully and each review checkpoint passed.
Delivery: login-required course link with current run and project identifiers.

正在使用“personwise-end-user-software-training”。 Build materials-only ERP training from the two selected manuals and share it with our implementation team.

预期结果:

Grounding: both manuals retained as required sources.
Course: role-specific workflow steps with no unsupported interface details.
Review: outline, script, and required slide images checked.
Delivery: playable link-access course for the implementation team.

正在使用“personwise-end-user-software-training”。 Resume the paused course and fix any unsupported steps before publication.

预期结果:

The paused run was reviewed against its sources, corrected with one bounded revision, rechecked, and published only after playable state was confirmed.

安全审计

高风险

v1 • 2026/8/5 打开版本化报告

Most static findings are false positives caused by Markdown backticks, defensive installer checks, and signed descriptor data. The fixed release URLs are genuine network exposure, and semantic review found material risks involving an opaque executable, response-provided update commands, external document uploads, and credit consumption.

已扫描文件

650

分析行数

复核项

已忽略误报

已确认安全问题 (4)

高

SKILL.md:74-80 assets/bootstrap.sh:128-165 assets/bootstrap.ps1:43-92

Opaque Third-Party Executable Installation

The skill asks agents to download and install a PersonWise executable that is unavailable for source review here. It also suppresses normal-path discussion of signing and reputation.

The skill instruction and both installers directly show the approved download, hash verification, and local installation flow. The downloaded binary is not auditable in these files.

高

SKILL.md:109-117 SKILL.md:120-125

Service-Provided Update Command Execution

The skill directs agents to run an exact action command returned through the PersonWise update response. A compromised response could supply unsafe command text.

The instructions explicitly require executing the returned action after approval. They do not require parsing it into an allowlisted executable and validated argument set.

高

SKILL.md:140-145 SKILL.md:199-207

External Upload of Training Materials

Named or selected training documents are treated as authorized for upload to PersonWise without distinct upload confirmation. These files may contain internal procedures or screenshots.

The workflow explicitly treats selected files as preauthorized and sends them through source add. The destination is the external PersonWise service described by the skill.

中

SKILL.md:134-138 SKILL.md:163-171

Course Credits Consumed Without Separate Confirmation

A course request is treated as authorization to consume existing credits, which may have financial value. The skill explicitly tells the agent not to ask again.

The authorization rule directly permits existing-credit use from a general creation request. Readiness checks prevent unavailable credit use but do not obtain transaction-specific consent.

能力复核项 (2)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

低

assets/bootstrap.ps1:43

Hardcoded URL

$request = [Net.Http.HttpRequestMessage]::new([Net.Http.HttpMethod]::Get, "https://releases.personwi

The installer downloads a PersonWise executable from a fixed HTTPS release host. Checksums reduce tampering risk, but the external download is genuine network and supply-chain exposure.

低

assets/bootstrap.sh:132

Hardcoded URL

url="https://releases.personwise.ai/cli/v1.1.6/$artifact"

The installer downloads a PersonWise executable from a fixed HTTPS release host. Checksums reduce tampering risk, but the external download is genuine network and supply-chain exposure.

风险因素

🌐 网络访问 (2)

assets/bootstrap.ps1:43 assets/bootstrap.sh:132

⚙️ 外部命令 (50)

📁 文件系统访问 (7)

assets/bootstrap.sh:81 assets/bootstrap.sh:83 assets/bootstrap.sh:128 assets/bootstrap.sh:16 assets/bootstrap.sh:18 assets/bootstrap.sh:128 assets/bootstrap.sh:180

审计者: codex

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/personwiseai-personwise-end-user-software-training/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/personwiseai-personwise-end-user-software-training/security.svg)](https://skillstore.io/skills/personwiseai-personwise-end-user-software-training?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/personwiseai-personwise-end-user-software-training?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/personwiseai-personwise-end-user-software-training/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/personwiseai-personwise-end-user-software-training.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

personwiseai. (2026). personwise-end-user-software-training security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/personwiseai-personwise-end-user-software-training/audits/1

BibTeX 引用

@techreport{personwiseai-personwiseai-personwise-end-user-software-training-2026,
  author = {personwiseai},
  title = {personwise-end-user-software-training security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/personwiseai-personwise-end-user-software-training/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "personwise-end-user-software-training security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "personwiseai"
date-released: "2026-08-05"
url: "https://skillstore.io/skills/personwiseai-personwise-end-user-software-training/audits/1"
identifiers:
  - type: other
    value: "skillstore:personwiseai-personwise-end-user-software-training:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据证据置信度: 中

架构

可维护性

内容

社区

规范符合性

你能构建什么

Train CRM Users

Convert approved CRM guides into a practical course covering navigation, core workflows, common errors, and support paths.

Support ERP Adoption

Build role-specific ERP training from internal procedures while preserving documented steps and version limits.

Standardize Team Training

Create a repeatable software course from current manuals, review each checkpoint, and publish with controlled access.

试试这些提示

Create Basic Software Training

Build end-user training for [software] from the attached guide. Focus on [workflow] for [learner role] and keep the course private.

Create Role-Based CRM Training

Create a [page count]-page CRM course for [role] using these guides. Cover [tasks], documented mistakes, recovery steps, and support resources.

Build Materials-Only ERP Training

Create ERP end-user training using only the selected documents. Name the taught version, verify every click path, review images, and publish by link.

Resume and Refine a Course

Resume PersonWise run [run ID]. Review fresh state and sources, correct unsupported content, inspect changed slides, then complete the requested access target.

最佳实践

Provide current guides, exact software versions, learner roles, and required workflows.
Choose materials-only mode when every course statement must come from supplied documents.
Review the final access mode and course link before distributing training.

避免

Do not request invented screens, permissions, features, or click paths.
Do not use this skill for administrator setup or developer documentation.
Do not upload unapproved local files or publish beyond the requested audience.

常见问题

What source materials work best?

Current user guides, process documents, approved screenshots, and task instructions work best. Sources should identify the software version and intended learner.

Can it create training without documents?

Yes, it can use an open topic workflow. Strict software instructions remain safest when supported by supplied materials.

Does it support CRM and ERP systems?

Yes. It supports end-user CRM and ERP training when the request identifies learner tasks and provides reliable product guidance.

Does it require PersonWise?

Yes. Course creation requires the PersonWise CLI, hosted service, browser authentication, and sufficient account credits.

Can learners ask questions during the course?

Yes. PersonWise courses can present through a digital human and answer voice questions grounded in the course content.

Can the course be shared publicly?

The skill supports private and link access. It changes access only when requested and reports the final link type clearly.