winapp-setup

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFE
Full Analysis
  • Official Tooling Installation: The skill provides instructions for installing the winapp CLI via well-known package managers such as winget and npm (using the official @microsoft namespace). This is a standard procedure for setting up developer environments.
  • Application Execution: The winapp run command is used to register and launch applications directly from local build output folders (e.g., ./bin/Debug). This functionality is a core requirement for the skill's purpose of testing and debugging local project code.
  • SDK Management: Commands like winapp update and winapp restore are used to manage Windows SDK versions. These operations involve downloading official SDK packages and projections required for Windows app development.
  • Credential Security Practices: The skill specifically mentions that the .winapp/ folder and devcert.pfx files are added to .gitignore. This is a positive security practice that helps prevent developers from accidentally committing sensitive certificates or large dependency folders to version control systems.
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 01:31 PM
Security Audit — agent-trust-hub — winapp-setup