ws1-uem-agent

Operate Omnissa Workspace ONE UEM safely from natural-language goals via the `ws1` CLI. Use this skill when the user wants to find devices, lock or wipe them, manage enrollments, query users, or run any tenant operation — including read-only inspection like "how many devices are unenrolled?" or "show me alice's devices". Calling the bare CLI without this skill works but is much slower; the skill teaches the safety rails (approval flow, freshness check, audit trail) so an agent doesn't fight the tool.