winapp-setup

Pass

Audited by Gen Agent Trust Hub on Nov 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • External Software Installation: The skill recommends installing the winapp CLI through official channels such as the Windows Package Manager (winget) and the @microsoft scope on the npm registry. These are established distribution paths for developer tooling.
  • Development Command Execution: The instructions detail the use of commands to build, run, and package Windows applications using the .NET SDK and MSBuild. These operations are standard within a development workflow and are necessary for the skill's stated purpose.
  • SDK and Dependency Management: The skill manages Windows SDK packages via NuGet. It provides guidance on configuring standard nuget.config files for private feeds, which is a common requirement in professional software development.
  • Security Best Practices: The skill encourages secure workflows by instructing users to add sensitive files, such as developer certificates (devcert.pfx), to .gitignore to prevent accidental exposure in version control systems.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 6, 2026, 07:13 AM