windows-remote-desktop-connection-doctor
An agent skill by daymade, from daymade/claude-code-skills. Tags: debugging, desktop, troubleshooting, vpn, windows.
What it does
Diagnose Windows App (Microsoft Remote Desktop / Azure Virtual Desktop / W365 / direct PC) connection issues on macOS. Analyze transport protocol selection (UDP Shortpath vs WebSocket), detect VPN/proxy interference, parse Windows App logs for Shortpath failures, and resolve stuck "Configuring remote PC..." dialogs caused by expired Microsoft accounts, server reboots, or client-side auth poisoning. Use when VDI connections are slow or stuck, when direct PC connections fail to connect, when transport shows WebSocket instead of UDP, when RDP Shortpath fails, or when Windows App is frozen at a progress dialog.
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add daymade/claude-code-skills --skill windows-remote-desktop-connection-doctor
Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/daymade/claude-code-skills
cp -r claude-code-skills/windows-remote-desktop-connection-doctor ~/.claude/skills/windows-remote-desktop-connection-doctor
Safety box score
Grade B, low risk: 23 of 100 risk points, rated 2026-10-16. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.
This skill is a macOS diagnostic for Windows App / RDP connection problems, and it mainly reads local app logs while running shell/Python probes against a user-specified remote PC plus some network-health checks. The main risks are outbound network activity, exposure of auth/network details from logs, and the fact that it executes diagnostic commands on the user's machine; it does not ask for sudo or make system changes itself.
| Category | Level | Why |
|---|---|---|
| Code & shell execution | 2 (moderate) | It actively runs local commands and a bundled probe, e.g. `python3 scripts/probe_rdp_server.py <host> [port]`, `python3 -c ...`, `lsof`, `ifconfig`, and `scutil --proxy`. |
| Network access | 2 (moderate) | The skill makes real network probes, including connecting to `<host>:3389` in `scripts/probe_rdp_server.py`, `tailscale netcheck`, and `curl ... http://<local-ip>:8080/api/read`, so it can send traffic to remote hosts and services. |
| Filesystem reach | 1 (low) | It reads the user's Windows App logs under `~/Library/Containers/com.microsoft.rdc.macos/Data/Library/Logs/Windows App/` and searches them with `grep`, but it does not write or delete files. |
| Secrets & credentials | 1 (low) | It inspects auth- and account-related material such as `OneAuthError_InteractionRequired`, `No valid refresh tokens available in the cache`, and `env | grep -i proxy`; this can surface sensitive identity or proxy details even though it does not request passwords. |
| Privilege & persistence | 0 (none) | There is no `sudo`, service installation, launchd/cron registration, or OS-wide configuration change in the shipped files; the fix steps are advisory/manual. |
| Instruction hijack surface | 0 (none) | I did not find instructions to ignore higher-priority rules, fetch remote prompts, hide behavior, or otherwise manipulate the agent's instructions. |
| Irreversible actions | 0 (none) | The skill is diagnostic only; it does not post, deploy, pay, delete, or perform other externally visible actions on the user's behalf. |
| Transparency | 0 (none) | All shipped files are readable text, including the Python script; there are no binaries, base64 blobs, or unpinned downloads. |
Before installing
- Read `scripts/probe_rdp_server.py` and confirm you want it to connect to arbitrary `<host>:3389` targets.
- Be okay with the skill reading `~/Library/Containers/com.microsoft.rdc.macos/Data/Library/Logs/Windows App/` on your Mac.
- If you use Tailscale or a proxy app, check whether `tailscale netcheck` and `http://<local-ip>:8080/api/read` are acceptable network calls on your machine.
Rated 2026-10-16 by an automated review of 5 files from the skill's repository.
Source
- Repository
- daymade/claude-code-skills (all skills from this repository)
- Path
- windows-remote-desktop-connection-doctor/SKILL.md
- Branch
- main
- Updated
- 2026-09-20
Related skills
- tunnel-doctor — Diagnoses concrete tunnel and proxy-path failures across macOS and Windows/WSL: Tailscale routing, proxy env/system bypass, SSH double tunneling.
- agents-debug — Use when your agent or environment is broken — wrong answers, errors, timeouts, tool failures, or CLI issues. Reads traces and logs to diagnose root causes.
- app-platform-troubleshooting — Debug running App Platform applications by accessing containers, analyzing logs, running diagnostics, and applying fixes.
- chrome-mcp-troubleshooting — Diagnose and fix Claude in Chrome MCP extension connectivity issues.
- debug-voice — Use when the user runs /debug-voice, says voice mode has flaws, asks to see or capture what happened in a Grok realtime voice session.
- fix-ci — Find failing PR checks, inspect logs or external check links, and apply focused fixes