winapp-cli
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and installs the
winappCLI from official Microsoft sources including WinGet, NPM (@microsoft/winappcli), and GitHub (microsoft/WinAppCli).- [COMMAND_EXECUTION]: Executes various commands using thewinapputility to initialize projects, package MSIX files, and sign executables.- [PRIVILEGE_ESCALATION]: Thewinapp cert installcommand installs development certificates into the Windows local machine certificate store, an operation that typically requires administrative privileges on Windows systems.- [INDIRECT_PROMPT_INJECTION]: The skill operates on user-provided project directories andAppxManifest.xmlfiles, creating a potential surface for instructions embedded in project metadata. - Ingestion points: Project directories (
./build-output), manifest files (AppxManifest.xml), and image assets. - Boundary markers: No explicit boundary markers are used in the command examples, as the tool operates on provided file paths.
- Capability inventory: File system access, MSIX package generation, and certificate management.
- Sanitization: Relies on the
winappCLI's internal validation of manifests and project structures.
Audit Metadata