スキル webview2-winui
📦
webview2-winui
コンテンツリビジョン r1 安全 ⚙️ 外部コマンド🌐 ネットワークアクセス📁 ファイルシステムへのアクセス
Embed Web Content in WinUI 3 with WebView2
Embedding web interfaces in Windows desktop apps requires careful initialization, messaging, and asset packaging. This skill guides WebView2 integration with local content mapping and explicit security boundaries.
対応: Claude Codex Code(CC)
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "webview2-winui" from https://skillstore.io/skills/shreyam1008-webview2-winui.md and its manifest at https://skillstore.io/api/skills/shreyam1008-webview2-winui/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「webview2-winui」を使用しています。 My local dashboard fails when Source is configured in XAML. What should change?
期待される結果:
- Initialize CoreWebView2 before configuring the virtual host mapping.
- Map the built asset folder with cross-origin access denied, then navigate to the mapped index page.
- Handle initialization exceptions and navigation failures with an application-owned retry state.
「webview2-winui」を使用しています。 Review the security requirements for my embedded web command bridge.
期待される結果:
- Accept messages only from the intended HTTPS origin and default port.
- Reject malformed payloads and enforce size, shape, and command permission checks before native work.
- Check the current document origin before sending sensitive data, and restrict navigation and new windows.
「webview2-winui」を使用しています。 How should I prepare web assets for a WinUI desktop release?
期待される結果:
- Build the web project before MSBuild evaluates asset content items.
- Include built assets in build and publish output, then verify the packaged index page exists.
- Use clean release staging to prevent removed assets from remaining in the package.
セキュリティ監査
安全v1 • 2026/10/2 バージョン別レポートを開く
All 56 static findings are false positives involving Markdown formatting, local virtual-host URLs, documentation references, or fixed project paths. The skill explains origin validation, command authorization, and minimal cross-origin access for WebView2 integration. No evidence found of prompt injection, credential theft, unauthorized reconnaissance, or data exfiltration.
1
スキャンされたファイル
225
解析済み行数
0
レビュー項目
0
誤検知を無視
リスク要因
⚙️ 外部コマンド (42)
SKILL.md:14-21 SKILL.md:21-23 SKILL.md:23-24 SKILL.md:24-25 SKILL.md:25-27 SKILL.md:27-31 SKILL.md:31-41 SKILL.md:41-67 SKILL.md:67-69 SKILL.md:69 SKILL.md:70 SKILL.md:74-85 SKILL.md:85-87 SKILL.md:87-88 SKILL.md:88-94 SKILL.md:94-98 SKILL.md:98-102 SKILL.md:102-104 SKILL.md:104-106 SKILL.md:106-123 SKILL.md:123-125 SKILL.md:125 SKILL.md:134-139 SKILL.md:139-140 SKILL.md:140-149 SKILL.md:149 SKILL.md:151-152 SKILL.md:152 SKILL.md:158-160 SKILL.md:160-166 SKILL.md:166-174 SKILL.md:174-176 SKILL.md:176-180 SKILL.md:180-182 SKILL.md:182-186 SKILL.md:186-197 SKILL.md:197-203 SKILL.md:203-211 SKILL.md:211 SKILL.md:212-213 SKILL.md:213 SKILL.md:214
🌐 ネットワークアクセス (7)
📁 ファイルシステムへのアクセス (1)
最新の完了済み静的・セマンティック監査では、確認済みのセキュリティ検出事項は見つかりませんでした。これは、スキルに副作用がないことを証明するものではありません。
監査者: codex
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/shreyam1008-webview2-winui/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/shreyam1008-webview2-winui?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/shreyam1008-webview2-winui?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/shreyam1008-webview2-winui/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/shreyam1008-webview2-winui.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
shreyam1008. (2026). webview2-winui security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/shreyam1008-webview2-winui/audits/1BibTeX形式の引用
@techreport{shreyam1008-shreyam1008-webview2-winui-2026,
author = {shreyam1008},
title = {webview2-winui security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/shreyam1008-webview2-winui/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "webview2-winui security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "shreyam1008"
date-released: "2026-10-02"
url: "https://skillstore.io/skills/shreyam1008-webview2-winui/audits/1"
identifiers:
- type: other
value: "skillstore:shreyam1008-webview2-winui:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 55
アーキテクチャ
85
保守性
87
コンテンツ
65
コミュニティ
91
仕様準拠
作成できるもの
Add a web dashboard to a desktop app
Host a React or Vite dashboard in WinUI 3 using local asset mapping and controlled initialization.
Design a restricted native message bridge
Plan message types, source validation, payload limits, and authorized native commands for an embedded web interface.
Package web assets for desktop releases
Review build ordering, MSBuild content items, release staging, and packaged asset verification.
これらのプロンプトを試す
Understand local content hosting
Explain how WebView2 hosts local web assets in WinUI 3 using virtual host mapping. Include initialization order and cross-origin access settings.
Add loading and error states
Help integrate WebView2 into my WinUI 3 page. Use my supplied XAML and C# to plan initialization, loading feedback, and navigation failure handling.
Review production asset packaging
Review my supplied WinUI project and web build configuration. Check asset build ordering, output paths, publish copying, and stale asset handling.
Audit the native message boundary
Review my supplied WebView2 message handlers and navigation rules. Check source origins, ports, payload bounds, command authorization, and sensitive outbound data.
ベストプラクティス
- Initialize CoreWebView2, configure local host mapping, and navigate only after setup succeeds.
- Enforce origin checks, payload validation, and per-command authorization at the native message boundary.
- Verify packaged assets and benchmark startup, memory, and media behavior against the deployed runtime.
回避
- Setting Source in XAML before virtual host mapping is configured.
- Exposing broad native object graphs without origin checks and command authorization.
- Publishing without verifying built assets or removing stale release files.
よくある質問
What does this skill cover?
It covers WebView2 integration in WinUI 3, including local content, initialization, messaging, performance, packaging, and theme synchronization.
Does it build a complete application automatically?
No. It provides guidance and examples that require adaptation to your application and Windows environment.
Can I use it for a browser-only React application?
Its focus is embedded web content in WinUI 3. It is not intended for generic browser-only React development.
How are local web assets loaded?
The examples map a local asset folder to a virtual HTTPS host after CoreWebView2 initialization.
Does web messaging require security checks?
Yes. Validate message origins, payloads, and command permissions, and restrict navigation before exposing native capabilities.
Are the examples ready for production without changes?
No. Implement app-defined helpers and validation, verify packaged output, and test behavior against the deployed WebView2 Runtime.
開発者情報
作成者
shreyam1008ライセンス
MIT
Skillstore リビジョン
r1
バージョンに関する注意
作者はバージョンを宣言していません。
参照
bbec03cf10354f3aaccd6dd24eda4ac9ceeceac5
メンテナンスの新しさ
2026/10/2
利用状況
0 ダウンロード · 0 閲覧
ファイル構成
📄 SKILL.md