winapp-signing
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- Administrative Privilege Requirement: The skill documents the use of
winapp cert install, which requires administrative access to update the Trusted Root Certification Authorities store. This is a standard requirement for enabling the system to recognize local development certificates. - Official Resource References: The instructions reference external resources from official Microsoft domains, such as the Visual C++ Redistributable (aka.ms). These downloads are standard prerequisites for the Azure Trusted Signing functionality and originate from the vendor's trusted infrastructure.
- CLI Tool Interaction: The skill utilizes the
winappCLI and system utilities likesigntool.exeto perform code signing and verification. These operations are consistent with the skill's stated purpose of managing application signatures and are presented as user-invoked commands. - Security Guidance and Warnings: The documentation includes proactive security advice, such as recommending unique passwords for production certificates and providing guidance on least-privilege configuration for CI/CD pipelines to minimize credential exposure.
Audit Metadata