技能 webview2-winui

📦

webview2-winui

Name: webview2-winui
Author: shreyam1008

内容修订 r1 安全 ⚙️ 外部命令🌐 网络访问📁 文件系统访问

Embed Web Content in WinUI 3 with WebView2

Embedding web interfaces in Windows desktop apps requires careful initialization, messaging, and asset packaging. This skill guides WebView2 integration with local content mapping and explicit security boundaries.

支持: Claude Codex Code(CC)

🥉 78 青铜

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "webview2-winui" from https://skillstore.io/skills/shreyam1008-webview2-winui.md and its manifest at https://skillstore.io/api/skills/shreyam1008-webview2-winui/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/shreyam1008-webview2-winui.md 已签名 manifest GET /api/skills/shreyam1008-webview2-winui/manifest 已签名 lockfile GET /api/skills/shreyam1008-webview2-winui/lockfile

测试它

正在使用“webview2-winui”。 My local dashboard fails when Source is configured in XAML. What should change?

预期结果:

Initialize CoreWebView2 before configuring the virtual host mapping.
Map the built asset folder with cross-origin access denied, then navigate to the mapped index page.
Handle initialization exceptions and navigation failures with an application-owned retry state.

正在使用“webview2-winui”。 Review the security requirements for my embedded web command bridge.

预期结果:

Accept messages only from the intended HTTPS origin and default port.
Reject malformed payloads and enforce size, shape, and command permission checks before native work.
Check the current document origin before sending sensitive data, and restrict navigation and new windows.

正在使用“webview2-winui”。 How should I prepare web assets for a WinUI desktop release?

预期结果:

Build the web project before MSBuild evaluates asset content items.
Include built assets in build and publish output, then verify the packaged index page exists.
Use clean release staging to prevent removed assets from remaining in the package.

安全审计

安全

v1 • 2026/10/2 打开版本化报告

All 56 static findings are false positives involving Markdown formatting, local virtual-host URLs, documentation references, or fixed project paths. The skill explains origin validation, command authorization, and minimal cross-origin access for WebView2 integration. No evidence found of prompt injection, credential theft, unauthorized reconnaissance, or data exfiltration.

已扫描文件

225

分析行数

复核项

已忽略误报

风险因素

⚙️ 外部命令 (42)

🌐 网络访问 (7)

SKILL.md:20 SKILL.md:59 SKILL.md:220 SKILL.md:221 SKILL.md:222 SKILL.md:223 SKILL.md:224

📁 文件系统访问 (1)

SKILL.md:168

最新一次完成的静态与语义审计未检测到已确认的安全发现。这并不能证明该 Skill 没有副作用。

审计者: codex

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/shreyam1008-webview2-winui/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/shreyam1008-webview2-winui/security.svg)](https://skillstore.io/skills/shreyam1008-webview2-winui?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/shreyam1008-webview2-winui?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/shreyam1008-webview2-winui/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/shreyam1008-webview2-winui.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

shreyam1008. (2026). webview2-winui security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/shreyam1008-webview2-winui/audits/1

BibTeX 引用

@techreport{shreyam1008-shreyam1008-webview2-winui-2026,
  author = {shreyam1008},
  title = {webview2-winui security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/shreyam1008-webview2-winui/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "webview2-winui security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "shreyam1008"
date-released: "2026-10-02"
url: "https://skillstore.io/skills/shreyam1008-webview2-winui/audits/1"
identifiers:
  - type: other
    value: "skillstore:shreyam1008-webview2-winui:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据证据置信度: 中

架构

可维护性

内容

社区

规范符合性

你能构建什么

Add a web dashboard to a desktop app

Host a React or Vite dashboard in WinUI 3 using local asset mapping and controlled initialization.

Design a restricted native message bridge

Plan message types, source validation, payload limits, and authorized native commands for an embedded web interface.

Package web assets for desktop releases

Review build ordering, MSBuild content items, release staging, and packaged asset verification.

试试这些提示

Understand local content hosting

Explain how WebView2 hosts local web assets in WinUI 3 using virtual host mapping. Include initialization order and cross-origin access settings.

Add loading and error states

Help integrate WebView2 into my WinUI 3 page. Use my supplied XAML and C# to plan initialization, loading feedback, and navigation failure handling.

Review production asset packaging

Review my supplied WinUI project and web build configuration. Check asset build ordering, output paths, publish copying, and stale asset handling.

Audit the native message boundary

Review my supplied WebView2 message handlers and navigation rules. Check source origins, ports, payload bounds, command authorization, and sensitive outbound data.

最佳实践

Initialize CoreWebView2, configure local host mapping, and navigate only after setup succeeds.
Enforce origin checks, payload validation, and per-command authorization at the native message boundary.
Verify packaged assets and benchmark startup, memory, and media behavior against the deployed runtime.

避免

Setting Source in XAML before virtual host mapping is configured.
Exposing broad native object graphs without origin checks and command authorization.
Publishing without verifying built assets or removing stale release files.

常见问题

What does this skill cover?

It covers WebView2 integration in WinUI 3, including local content, initialization, messaging, performance, packaging, and theme synchronization.

Does it build a complete application automatically?

No. It provides guidance and examples that require adaptation to your application and Windows environment.

Can I use it for a browser-only React application?

Its focus is embedded web content in WinUI 3. It is not intended for generic browser-only React development.

How are local web assets loaded?

The examples map a local asset folder to a virtual HTTPS host after CoreWebView2 initialization.

Does web messaging require security checks?

Yes. Validate message origins, payloads, and command permissions, and restrict navigation before exposing native capabilities.

Are the examples ready for production without changes?

No. Implement app-defined helpers and validation, verify packaged output, and test behavior against the deployed WebView2 Runtime.

开发者详情

作者

shreyam1008

许可证

MIT

Skillstore 修订

版本提示

作者未声明版本。

仓库

https://github.com/shreyam1008/shre-skills/tree/ba9787f41c2fe1be1062eeb6322bc339a1026383/skills/webview2-winui

引用

bbec03cf10354f3aaccd6dd24eda4ac9ceeceac5

维护新鲜度

2026/10/2

使用量

0 次下载 · 0 次浏览

文件结构

提升 Playwright 测试覆盖率

由 C0ntr0lledCha0s

当配置、定位器和 fixtures 不一致时，Playwright 测试套件可能会变得不稳定。此技能提供可靠浏览器测试、调试和可复用页面对象的实用模式。

编码与开发查看

webview2-winui

使用我的智能体安装

Agent 可读资源

测试它

安全审计

风险因素

复制报告链接

Markdown 徽章

HTML 徽章

嵌入卡片

APA 引用

BibTeX 引用

CITATION.cff

Skillstore 评分

你能构建什么

Add a web dashboard to a desktop app

Design a restricted native message bridge

Package web assets for desktop releases

试试这些提示

最佳实践

避免

常见问题

开发者详情

shreyam1008 的更多技能

web-performance

webgpu

webgl

wasm-rust

vgpu

tanstack

相关技能

gauntlet

analyzing-test-quality

git-advanced

jest-testing

analyzing-patterns

playwright-testing