winapp-maui
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- Standard Build Operations: The skill provides instructions for utilizing standard .NET and Windows packaging tools (
dotnet publish,winapp package). These commands are essential for the skill's primary purpose of application deployment and are used in a conventional manner. - Secure Secret Management: The included GitHub Actions workflow examples demonstrate the correct implementation of secret management by using
${{ secrets.SIGN_PFX_BASE64 }}and${{ secrets.SIGN_PFX_PASSWORD }}. This approach avoids hardcoding sensitive information and follows established security protocols for CI/CD pipelines. - Resource Cleanup: The skill includes a dedicated step in its CI/CD example to remove the temporary signing certificate (
Remove-Item -Path $env:SIGN_PFX_PATH). This practice reduces the risk of sensitive files persisting in the build environment. - Trusted Resource Usage: The skill references official GitHub Actions and workloads from recognized organizations, ensuring that the development environment is built using reputable components.
Audit Metadata