personwise/personwise-community-onboarding
New members join, lurk, and leave — because nobody showed them how to belong. Turn your community guidelines and welcome materials into an interactive digital-human community onboarding course that turns new members into participating ones and stays askable after the welcome thread. Benefits, rules, and access come only from your documents.
70
88%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The Skill's runtime bootstrap scripts (assets/bootstrap.sh and assets/bootstrap.ps1) download and install a remote executable from https://releases.personwise.ai/cli/v1.1.6/personwise_1.1.6_windows_amd64.zip (and the related https://releases.personwise.ai/cli/v1.1.6/$artifact URL), which fetches and executes remote code as a required dependency.
Where we found it
releases.personwise.ai
dependency · 2 sites
The bootstrap.sh script downloads a platform-specific PersonWise CLI executable from releases.personwise.ai using curl, verifies its checksum, and installs it as a required runtime dependency.
assets/bootstrap.sh
132
url="https://releases.personwise.ai/cli/v1.1.6/$artifact"
assets/bootstrap.sh
134
curl --disable --fail --silent --show-error --proto '=https' --tlsv1.2 --connect-timeout 10 --max-time 300 --max-filesize "26214400" --output "$archive" "$url"
- Audited
- Security analysis