winapp-signing

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [System Store Modification]: The winapp cert install command adds certificates to the 'Trusted Root Certification Authorities' store. This requires administrative privileges and is a standard procedure for enabling the installation of apps signed with development certificates.
  • [Credential Management]: The tool uses a default password ('password') for generated development certificates. The documentation provides clear guidance on overriding this with the --password flag for better security in sensitive environments.
  • [External Service Integration]: The skill mentions the Digicert timestamp server (http://timestamp.digicert.com) for production signing. Digicert is a recognized Certificate Authority, and timestamping is a best practice for long-term signature validity.
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 01:31 PM
Security Audit — agent-trust-hub — winapp-signing