daytona-windows-cert
test on Windows, enterprise CA, corporate certificate, GPO cert, TLS fetch failed, Windows sandbox, daytona windows, self-hosted cert. Use when validating iPolloWork Windows enterprise TLS/OS-trust fixes in a Daytona Windows sandbox.
68
83%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Critical
Do not install without reviewing
Security
2 findings: 1 critical severity, 1 medium severity. Installing this skill is not recommended: please review these findings carefully if you do intend to do so.
E005: Suspicious download URL detected in skill instructions.
What this means
Detected a suspicious URL in the skill instructions that could lead the agent to download and execute malicious scripts or binaries. This includes links to executables from untrusted sources, typosquatting of official packages, URL shorteners that obscure the destination, and personal file hosting services.
Why it was flagged
These URLs include direct GitHub release download and raw PowerShell script links (executable content) which are common vectors for distributing malware—especially when scripts are fetched and executed with relaxed PowerShell execution policies—whereas the poc.ipollowork.test endpoints are local test listeners and not public downloads.
W013: Attempt to modify system services in skill instructions.
What this means
The skill prompts the agent to compromise the security or integrity of the user’s machine by modifying system-level services or configurations, such as obtaining elevated privileges, altering startup scripts, or changing system-wide settings.
Why it was flagged
The skill explicitly instructs installing a fake corporate CA into the Windows machine trust store, creating/running a SYSTEM scheduled task, and using PowerShell ExecutionPolicy Bypass (i.e., modifying OS trust and running elevated/system-level changes), which directly changes the machine's security-sensitive state and bypasses protections.
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The skill downloads and executes remote code at runtime (e.g., the GitHub release download URL "https://github.com/Devin-AXIS/iPolloWork/releases/download/${TAG}/$(basename \"$ZIP\")" and raw GitHub-hosted PowerShell scripts https://raw.githubusercontent.com/Devin-AXIS/iPolloWork/dev/scripts/support/setup-ipollowork-tls-repro.ps1 and https://raw.githubusercontent.com/Devin-AXIS/iPolloWork/dev/scripts/support/ipollowork-doctor.ps1 are fetched into the VM via curl/tar and then run), so these are runtime external dependencies that execute code.
- Repository
- Devin-AXIS/iPolloWork
- Commit
bd5caef
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.