winapp-setup

Pass

Audited by Gen Agent Trust Hub on Apr 17, 2026

Risk Level: SAFE
Full Analysis
  • [Dependency Management]: The skill recommends installing the WinApp CLI through official package managers (winget and npm). The packages specified, such as @microsoft/winappcli, are official resources associated with the vendor.
  • [Workspace Initialization]: The winapp init and winapp restore commands are used to manage local Windows SDK packages. These operations are standard for development environments and are used to ensure the correct SDK versions are available for project builds.
  • [Security Best Practices]: The skill explicitly mentions adding devcert.pfx and the .winapp/ folder to .gitignore. This is a positive security pattern that prevents sensitive signing certificates and heavy binary dependencies from being accidentally committed to version control.
  • [Application Execution]: The winapp run command registers a debug identity and launches the application. This is a routine task during software development and testing to simulate the MSIX packaging environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 17, 2026, 06:18 AM