Persona Docs

Create persona documentation for a product or codebase. Use when asked to create persona docs, document target users, define user journeys, document onboarding flows, or when starting a new product and needing to define its audience. Persona docs should be the first documentation created for any product.

This skill is coherent for creating persona documentation and doesn't request credentials or install arbitrary code. Before installing: verify the skill's source/provenance (homepage is missing and the registry owner is unknown), confirm any npx/install commands reference trusted packages, and be aware the instructions ask the agent to read repository files (README, landing pages, etc.) — don't run it in a repo containing sensitive secrets you don't want the agent to access. If you need higher assurance, request a homepage or source repo and inspect the files directly before enabling the skill.

Type: OpenClaw Skill Name: persona-docs Version: 0.1.0 The skill's core functionality and agent instructions in `SKILL.md` are benign and align with its stated purpose of creating persona documentation. However, the `README.md` file includes an installation instruction (`npx add https://github.com/wpank/ai/tree/main/skills/writing/persona-docs`) that fetches the skill from a remote GitHub repository. This introduces a supply chain vulnerability, as the integrity of the installed skill depends on the security of the external repository, which could be compromised to deliver malicious code. This is classified as suspicious due to this risky installation method, which is a vulnerability, not direct malice within the skill's runtime.