CtrlK
BlogDocsLog inGet started
Tessl Logo

daytona-windows-cert

test on Windows, enterprise CA, corporate certificate, GPO cert, TLS fetch failed, Windows sandbox, daytona windows, self-hosted cert. Use when validating OpenWork Windows enterprise TLS/OS-trust fixes in a Daytona Windows sandbox.

75

Quality

94%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Medium

Suggest reviewing before use

SKILL.md
Quality
Evals
Security

Quality

Content

88%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A thorough, executable, well-sequenced Windows repro workflow with strong validation checkpoints and genuinely useful shell/session-0 gotchas. Its main weakness is conciseness: it repeats some command blocks verbatim and inlines a script that already exists as a bundle file.

Suggestions

Remove the verbatim duplicate command blocks under 'The release command shape from the verified session was' and 'The Windows download/extract shape from the verified session was' since the same commands appear immediately above.

Replace the inlined ca-probe.js listing with a one-line pointer to scripts/ca-probe.js (the bundle file already exists) to avoid duplication and tighten the body.

Move the large base64-encoded PowerShell scheduled-task payload into a scripts/ helper (e.g. scripts/install-tls-repro-task.ps1) and invoke it by path, keeping SKILL.md as an overview.

DimensionReasoningScore

Conciseness

The body is mostly efficient and earns its tokens with non-obvious verified-session detail, but it duplicates commands verbatim under 'The release command shape from the verified session was' and 'The Windows download/extract shape from the verified session was' immediately after the same commands appear, which is padding.

4 / 5

Actionability

It provides fully executable copy-paste commands (daytona create/exec, gh release create, schtasks, the inline ca-probe.js), exact Windows paths, and a verified JSON result; only minor <SANDBOX_ID>/<tag> substitutions are left to the user.

5 / 5

Workflow Clarity

Sections 1-5 plus Cleanup are explicitly sequenced with validation checkpoints (netstat listener check, ca-probe exit code, findstr on system-ca-bundle.pem, VNC success/fail assertions) and a restart-feedback note for the memoized CA bundle, with destructive operations (cert install, scheduled task, prerelease) paired with cleanup.

5 / 5

Progressive Disclosure

Sections are clear and the scripts/ca-probe.js bundle file is real and referenced, but the full ca-probe.js source is inlined in the body (duplicating the bundle file) and large base64-encoded PowerShell blobs live inline rather than in a separate script, leaving mild organization gaps.

4 / 5

Total

18

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A highly specific, trigger-rich description that cleanly states both capability and use-conditions with concrete actions and natural keywords. Third-person voice is maintained throughout and no over-claiming or fluff is present.

DimensionReasoningScore

Specificity

The description names multiple concrete actions ('install a fake corporate CA', 'serve healthy and broken HTTPS control planes', 'prove the desktop app and spawned runtimes use the operating system trust path') with comprehensive coverage.

5 / 5

Completeness

It explicitly answers both what ('Run the verified Windows repro...install a fake corporate CA...serve healthy and broken HTTPS...prove the desktop app and spawned runtimes use the OS trust path') and when ('Use when validating OpenWork Windows enterprise TLS/OS-trust fixes in a Daytona Windows sandbox').

5 / 5

Trigger Term Quality

It packs natural trigger phrases a user would actually say ('test on Windows', 'Windows sandbox', 'daytona windows', 'enterprise CA', 'corporate certificate', 'GPO cert', 'TLS fetch failed', 'self-hosted cert') with synonyms.

5 / 5

Distinctiveness Conflict Risk

It carves a clear niche (OpenWork Windows enterprise TLS validation in a Daytona Windows sandbox) with distinct triggers and minimal overlap with other skills.

5 / 5

Total

20

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

referenced_paths_exist

Referenced path issues: 5 missing, 5 deeper-than-1-level

Warning

Total

15

/

16

Passed

Repository
different-ai/openwork
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.