remote-desktop-testing-windows
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill automatically manages its dependencies by installing
@daytona/sdk(version 0.167.0) andplaywright-corefrom the NPM registry into a local state directory (~/.letta/skill-state/) during its first execution. - [COMMAND_EXECUTION]: The helper script invokes several local system utilities including
git,rsync,zip, andffmpegto handle project synchronization and media processing. It uses user-provided arguments for directory paths and command-line options. - [REMOTE_CODE_EXECUTION]: The core functionality of the skill is to execute arbitrary commands on a remote Windows sandbox. It provides commands to run PowerShell scripts, launch GUI applications in interactive sessions, and upload local file content to the remote system.
- [CREDENTIALS_UNSAFE]: The skill requires a
DAYTONA_API_KEYto authenticate with the Daytona service. It retrieves this sensitive value from standard locations such as environment variables or a local.envfile, which is consistent with typical CLI tool patterns.
Audit Metadata