daytona-windows-cert

test on Windows, enterprise CA, corporate certificate, GPO cert, TLS fetch failed, Windows sandbox, daytona windows, self-hosted cert. Use when validating iPolloWork Windows enterprise TLS/OS-trust fixes in a Daytona Windows sandbox.

Quality

83%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Critical

Do not install without reviewing

Quality

Content

77%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is highly actionable with a clear, checkpointed workflow and valuable verified-session knowledge Claude lacks. Its main weakness is progressive disclosure and conciseness: it duplicates the bundled ca-probe.js inline and references external repo paths instead of pointing to bundle files, making it heavier than necessary.

Suggestions

Replace the inline ca-probe.js listing with a one-line pointer to scripts/ca-probe.js to avoid duplicating the bundled file and tighten the body.

Drop the redundant 'verified session shape' command callouts that merely restate the concrete command already shown above them.

Clarify which referenced support paths are checked-in repo assets (not part of this skill bundle) vs. bundle files, so navigation stays genuinely one level deep.

Dimension	Reasoning	Score
Conciseness	Mostly efficient and focused on verified-session gotchas Claude genuinely lacks (the session-0 trap, SYSTEM vs interactive-user profile paths, the once-memoized CA bundle), but it duplicates several commands via parenthetical "verified session shape" callouts and pastes the full ca-probe.js source inline even though the same file ships in scripts/ca-probe.js.	2 / 3
Actionability	Provides fully executable, copy-paste-ready bash and PowerShell commands with exact paths, a base64-UTF-16LE encoded-command pattern, and the expected verification JSON, meeting the level-3 anchor for concrete executable guidance.	3 / 3
Workflow Clarity	A clear numbered 1–5 sequence with explicit validation checkpoints (netstat listener check, ca-probe exit code, VNC success/fail expectations) and a dedicated cleanup section for the destructive CA/sandbox/release operations, matching the level-3 anchor including feedback for the risky teardown.	3 / 3
Progressive Disclosure	Sections are well-organized and it does reference a real bundle file (scripts/ca-probe.js), but the ca-probe.js source is duplicated inline and several referenced paths (scripts/support/..., docs/support/...) point at repo assets outside this skill bundle, leaving the SKILL.md largely monolithic rather than a lean overview pointing one level deep.	2 / 3
	Total	10 / 12 Passed

Description

90%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is well-targeted with strong natural trigger terms and an explicit 'Use when' clause that pairs the what and the when. Its only weakness is specificity: it leans on a keyword list rather than listing multiple distinct concrete actions.

Dimension	Reasoning	Score
Specificity	Names the domain (Windows enterprise CA, corporate certificate, GPO cert, self-hosted cert) and a verifying action ("validating iPolloWork Windows enterprise TLS/OS-trust fixes"), but it is largely a trigger-term list rather than multiple concrete enumerated actions, so it stops short of the level-3 anchor.	2 / 3
Completeness	Explicitly answers both what ("validating iPolloWork Windows enterprise TLS/OS-trust fixes") and when ("Use when validating ... in a Daytona Windows sandbox"), satisfying the level-3 anchor requiring both with explicit triggers.	3 / 3
Trigger Term Quality	Good coverage of natural phrases a user would actually say — "test on Windows", "Windows sandbox", "daytona windows", "TLS fetch failed", "enterprise CA", "GPO cert", "self-hosted cert" — matching the level-3 anchor for natural term coverage.	3 / 3
Distinctiveness Conflict Risk	A clear, narrow niche (iPolloWork Windows enterprise TLS / OS-trust verification inside a Daytona sandbox) with distinct triggers, making it unlikely to fire for unrelated skills.	3 / 3
	Total	11 / 12 Passed

Validation

93%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

Criteria	Description	Result
referenced_paths_exist	Referenced path issues: 5 missing, 5 deeper-than-1-level	Warning

	Total	15 / 16 Passed

Repository: Devin-AXIS/iPolloWork
Path: .opencode/skills/daytona-windows-cert/SKILL.md
Commit: bd5caef

Reviewed: about 15 hours ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.