winui-packaging
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONPERSISTENCEEXTERNAL_DOWNLOADS
Full Analysis
- Administrative Privileges: The skill documents the use of the
winapp cert installcommand, which requires administrative elevation. This is a standard requirement on Windows to add development certificates to the Trusted Root Certification Authorities store. - Persistence: Installing a development certificate into the system's certificate store is a persistent operation. This is necessary for the operating system to consistently trust the signed application packages during the development and testing cycle.
- Vendor-Owned Resources: The instructions utilize the
microsoft/setup-WinAppCliGitHub Action and refer to the Microsoft Partner Center. These are official resources provided by the vendor and are consistent with the skill's focus on WinUI 3 development. - Secure Secret Management: The skill provides guidance on managing production certificates and passwords by recommending the use of repository secrets rather than hardcoding them in the build configuration, aligning with security best practices for CI/CD environments.
Audit Metadata