daytona-windows-cert
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
daytona execto run administrative commands on a remote Windows sandbox, includingschtasksfor persistence of the test listeners andpowershellfor certificate management. - [EXTERNAL_DOWNLOADS]: The skill downloads support scripts and application builds from the vendor's GitHub repository (
github.com/Devin-AXIS/iPolloWork). These are legitimate resources used for the stated purpose of testing enterprise TLS fixes. - [COMMAND_EXECUTION]: Employs
powershell -EncodedCommandto execute Base64-encoded scripts. Analysis of the encoded content reveals it is used to safely handle Windows pathing and quotes for setting up the test environment. - [PERSISTENCE_MECHANISMS]: Creates a Windows Scheduled Task (
schtasks /create) namediPolloWorkTlsRepro. This is used to keep the mock TLS server running in the background during the test session and is documented with a cleanup command.
Audit Metadata