retail-pos-fleet-health — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited retail-pos-fleet-health (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Sweeps many Windows machines in parallel over WinRM. The bundled script scripts/Invoke-PosFleetHealth.ps1 collects health signals and emits JSON with deterministically ranked warnings; the agent (you) writes the narrative. The script is read-only on the targets — it never starts/stops anything.SCRIPT = this skill's scripts/Invoke-PosFleetHealth.ps1.
The script always prompts for an admin credential (Get-Credential) — held in memory for the run, reused across all hosts, never written to disk. Do not pass passwords on the command line. SQL checks run inside each remote session against localhost with that Windows login — no SQL credentials needed.
Always run with pwsh. Parse the JSON from stdout.
| Want | Pass | ||
|---|---|---|---|
| A few machines | -ComputerName POS001,POS002,POS003 | ||
| The whole fleet | -ServerListFile C:\ops\pos-hosts.txt (one host per line, # comments OK) | ||
| Other services | -ServicePattern '*POS*','*Retail*','MSSQL*','MyService*' | ||
| Stricter disk check | -DiskMinFreePct 15 | ||
| Event window | -EventHours 24 (default) | ||
| Express limit warn level | -ExpressWarnAtPct 80 (default; of -ExpressLimitGB 10) | ||
| Parallelism | -ThrottleLimit 12 (default) | ||
| Save full report | -OutFile C:\ops\fleet-health.json (do this for 100 hosts!) | ||
| Transport/auth | -UseSSL · `-Authentication Negotiate | Kerberos | CredSSP` |
# Full fleet sweep, detail to file, compact summary on stdout
pwsh -File SCRIPT -ServerListFile C:\ops\pos-hosts.txt -OutFile C:\ops\fleet-health.json(status, host counts, ranked warnings). For big fleets always use -OutFile.
summary.warnings is ranked: unreachable/auth → stopped services → Express DBs near the limit → low disk → SQL query failures → high error counts. Each warning has computer, type, detail. Per-host detail (disks, services, SQL instances + database sizes, recent error counts) is under hosts[]. See REFERENCE.md.
answer is "which machines need attention and why", not 100 host reports.
hosts_failed (unreachable/auth) explicitly —an unreachable POS may itself be the incident. Never imply full coverage when hosts failed.
data-file limit stops syncing/working. Recommend cleanup/shrink or escalation per the organization's POS procedure.
(or ax2012-sql-performance for the channel DB); for event-log detail, use win-eventlog-triage against that host.
unreachable hosts → WinRM not enabled on POS images, firewall, or wrong network.auth_failed → the credential lacks admin rights on the targets.sql_query_failed on a host → SQL service running but the login has no access; the restof the host's data is still collected.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.