app-it-windows

app-it-windows is a skill for Claude Code from Christian-Katzmann/app-it. It costs 89 tokens per session (1,361 once invoked), scanned A, original, MIT.

A beta tool that packages a local web project as a Windows desktop launcher, including an executable, Start Menu shortcut, and icon.

In plain words
What is it for?
Use it to build a WPF and WebView2 launcher, start the project's local server, and clean it up when the app closes.
Why use it?
It gives a local web project a desktop entry point on Windows, while making clear that real Windows hardware testing is still needed.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the app-it-windows plugin — 1 skill shipped together

Good fit Use it to build a WPF and WebView2 launcher, start the project's local server, and clean it up when the app closes.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/christian-katzmann/app-it/app-it-windows
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add Christian-Katzmann/app-it --skill app-it-windows
Clone the repo
git clone --depth 1 https://github.com/Christian-Katzmann/app-it

Made for: Claude Code.

Or install app-it-windows, the plugin that ships this one along with the rest of its 1 skill.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for app-it-windows

README.md
[![agentmods](https://agentmods.dev/badge/skills/christian-katzmann/app-it/app-it-windows/github.svg)](https://agentmods.dev/skills/christian-katzmann/app-it/app-it-windows)
Your own site
<a href="https://agentmods.dev/skills/christian-katzmann/app-it/app-it-windows"><img src="https://agentmods.dev/badge/skills/christian-katzmann/app-it/app-it-windows/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for app-it-windows

Your own site · 80×15
<a href="https://agentmods.dev/skills/christian-katzmann/app-it/app-it-windows"><img src="https://agentmods.dev/badge/skills/christian-katzmann/app-it/app-it-windows.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 89 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,361 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00089 $0.01361
Opus 5 $0.00044 $0.00681
Sonnet 5 $0.00018 $0.00272
Haiku 4.5 $0.00009 $0.00136

Measured 9d ago against content hash e8047e3a2e94, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

app-it-windows scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

The scan reads SKILL.md. This mod also ships 8 executable files (templates/desktop-build.ps1, templates/desktop-icons.ps1, templates/desktop-install.ps1, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/app-it-windows/skills/app-it-windows/SKILL.md · 155 lines

How it starts

The opening of the file, as written. The whole thing — 155 lines — stays where its author put it; the contents beside it link to each section on GitHub.

app-it-windows - Make a project launchable on Windows (beta)

Windows beta: scaffolded, untested on real hardware, maintainer wanted.

The macOS app-it lane is proven. This Windows sibling mirrors the contract with Windows primitives, but every runtime behavior that needs a real Windows desktop must be marked deferred: this needs a Windows maintainer - see docs/WINDOWS.md.

Non-Negotiables

  1. Run templates/inspect.ps1 first and read the output before editing.
  2. Trust disk over docs. Verify project type, scripts, ports, and desktop signals from files.
  3. Build everything a Mac or CI can build; never claim Windows runtime behavior works unless it was verified on real Windows hardware.
  4. Prefer the WPF + WebView2 host. Edge --app= is a fallback, not the default.
  5. Keep Windows visibly beta in every report and user-facing summary.
  6. Copy shipped templates and customize through scripts\app-it.config.json. Do not re-derive launcher patterns.
  7. Verify build/lint/config checks, then list hardware-only checks as deferred.

Reference Map

Open only what the inspection or chosen path needs:

  • references/maintainer-contract.md - what a Mac can produce, what must be deferred, and the exact Windows-maintainer phrase.
  • references/inspection-and-strategies.md - project inspection, toolchain probes, strategy tree, W-Native, W-Edge, W-Static, W-Multi, B, and D.
  • references/generated-files.md - template roster, allowed target files, config JSON, package scripts, and Start Menu destination.
  • references/wrapper-host.md - WebView2 host, lifecycle, Job Object ownership, single-instance behavior, and wrapper argument contract.
  • references/verification.md - buildable checks, Windows-only checks, and deferred rows.
  • references/report-template.md - exact beta report format.

Templates

Templates live next to this file in templates/. Copy them into the target project and keep their contracts intact:

templates/
  wrapper-windows/
  desktop-build.ps1
  desktop-install.ps1
  desktop-quit.ps1
  inspect.ps1
  run-template.ps1
  run-template-edge.ps1
  desktop-icons.ps1
  placeholder-icon-gen.ps1
  PSScriptAnalyzerSettings.psd1
  app-it.config.example.json

Read the full file on GitHub · 155 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 155 lines · 89 tokens per session scan A e8047e3a2e94

Subscribe to this mod's changes

app-it-windows is a skill published in the GitHub repository Christian-Katzmann/app-it (217 stars, last pushed 1mo ago), licensed MIT. It adds 89 tokens to every session and 1,361 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

claudexor

Use the local Claudexor control plane for harness-agnostic coding work across Claude Code, Codex, Cursor, and OpenCode. Use when a task benefits from route-aware harness and account selection, quota-aware account rotation, shared thread context, read-only planning or research, best-of-N execution, or cross-harness…

razzant/claudexor · 73 tokens

tfx-hub

A Korean-language skill for managing a TFX message hub, which is a local message bus for communication between coding agents. It supports starting, stopping, checking, and routing work through the hub.

tellang/triflux · 84 tokens

tfx-plan

A workflow for breaking a coding task into an implementation plan. It reviews the proposed work using several planning and critique steps, with a quicker mode when needed.

tellang/triflux · 68 tokens

tfx-review

A code-review workflow that asks several command-line AI reviewers to inspect changes independently, then reports issues that at least two reviewers agree on. TDD means test-driven development, where tests are written to guide implementation, but this add-on is for reviewing code rather than defining TDD.

tellang/triflux · 83 tokens

merge-worktree

A Korean-language workflow for squash-merging a Git worktree branch into a target branch and creating a conventional commit message. A worktree is a separate working directory connected to the same Git repository; squash-merge combines its changes into one commit.

tellang/triflux · 66 tokens

self-improve

The deliberate self-improvement loop for the maintainer — step back from fixing issues and improve Heimdall's OWN capability. Ports karpathy/autoresearch to Heimdall's routing/planning: collect evidence from metrics.jsonl + queue dead/done stats → form testable hypotheses → run a bounded routing experiment → evaluate…

randomittin/heimdall · 0 tokens