winapp-signing
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [System Store Modification]: The
winapp cert installcommand adds certificates to the 'Trusted Root Certification Authorities' store. This requires administrative privileges and is a standard procedure for enabling the installation of apps signed with development certificates. - [Credential Management]: The tool uses a default password ('password') for generated development certificates. The documentation provides clear guidance on overriding this with the
--passwordflag for better security in sensitive environments. - [External Service Integration]: The skill mentions the Digicert timestamp server (
http://timestamp.digicert.com) for production signing. Digicert is a recognized Certificate Authority, and timestamping is a best practice for long-term signature validity.
Audit Metadata