Can a Worklet's Evaluation Code make changes to a Device?

Answer: 

Yes - there are no "guardrails" in the Automox product to prevent changes from being made to a Device by the PowerShell or BASH code in the Evaluation code block. Therefore, take care in ensuring that the Worklet's Evaluation code only evaluates - not remediates, too.

NOTE: Remember that Evaluation code is run during a Device Scan, regardless of whether or not the Worklet is scheduled.