Author Workspace ONE UEM scripts — code that runs on managed devices to install, remediate, enforce, or clean up state. Use whenever the user wants to create, design, write, or scaffold a UEM script (install Homebrew, clear quarantine attributes, enforce a registry key, restart a service, remove malware, apply a config change, or any other action that modifies device state) on macOS, Windows, or Linux. Also use when the user says "push this out to my fleet," "remediate X on my devices," "make sure Y is the case on every Mac," or any variation where the goal is to change device state via a Workspace ONE-delivered script. Pair with sensor-author for detection and openclaw-style-detection for detect+remediate workflows.
Author Workspace ONE UEM sensors — scripts that run on managed devices and return a typed value for reporting, Smart Group criteria, or compliance. Use whenever the user wants to create, design, write, or scaffold a UEM sensor (battery health, FileVault status, BitLocker state, Rosetta presence, installed app version, last patch date, certificate expiry, custom telemetry, etc.) on macOS, Windows, or Linux. Also use when the user says "check X on my devices," "report whether Y is installed," "expose Z as a Smart Group attribute," or any variation where the end goal is a device-side probe whose result shows up in UEM. Pair with sensor-deploy or openclaw-style-detection for assignment and remediation workflows.