winapp-setup
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- External SDK and Symbol Downloads: The skill facilitates the download of the Windows SDK and Windows App SDK during the initialization process. It also includes an option to fetch debugging symbols from the Microsoft Symbol Server. These operations target official Microsoft infrastructure to provide necessary development dependencies.
- Package Installation: Instructions include installing the
winappCLI via the official Windows Package Manager (winget) or the NPM registry. These are standard methods for distributing development tools. - Application Execution and Registration: The
winapp runcommand registers a development identity and launches the application from the project's build output folder. This allows developers to test their applications with MSIX identity in a local environment. - Sensitive File Management: The skill mentions the creation of
devcert.pfxfor code signing and explicitly instructs the user to include it in.gitignoreto prevent accidental exposure in version control systems, which aligns with security best practices.
Audit Metadata