personwise/personwise-security-awareness-training
Employees are the attack surface, and a skimmed policy PDF does not change behavior. Turn your security policies into an interactive digital-human security awareness training course that builds recognition and reporting reflexes — and answers employee questions on demand. Honest by design: awareness reduces risk, it never claims to eliminate it.
68
85%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The bundled bootstrap scripts download and install a remote PersonWise CLI binary at runtime (executing code), for example "https://releases.personwise.ai/cli/v1.1.6/personwise_1.1.6_windows_amd64.zip" (and the equivalent artifact URL used in assets/bootstrap.sh), which the Skill requires to run.
Where we found it
https://releases.personwise.ai/cli/v1.1.6/
dependency · 1 site
The bootstrap.sh script downloads the PersonWise CLI binary from releases.personwise.ai at runtime and executes it, which is an unverifiable external dependency fetched and executed by the plugin itself.
assets/bootstrap.sh
132
url="https://releases.personwise.ai/cli/v1.1.6/$artifact"
- Audited
- Security analysis