Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/unoplatform/uno/winui-runtime-testsnpx skills add unoplatform/uno --skill winui-runtime-testsgit clone --depth 1 https://github.com/unoplatform/unoWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/unoplatform/uno/winui-runtime-tests)<a href="https://agentmods.dev/skills/unoplatform/uno/winui-runtime-tests"><img src="https://agentmods.dev/badge/skills/unoplatform/uno/winui-runtime-tests.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00035 | $0.06249 |
| Opus 5 | $0.00017 | $0.03125 |
| Sonnet 5 | $0.00007 | $0.01250 |
| Haiku 4.5 | $0.00003 | $0.00625 |
Grade A, and why
winui-runtime-tests scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 448 lines — stays where its author put it; the contents beside it link to each section on GitHub.
User Input
$ARGUMENTS
You MUST consider the user input before proceeding (if not empty).
Overview
You are executing the WinUI Runtime Tests Skill. This skill builds the WinAppSDK SamplesApp as an MSIX package, installs it, and runs runtime tests via the app execution alias. This is used to validate behavior against native WinUI — the reference implementation that Uno Platform targets.
Requirements: Windows only. Requires MSBuild (Visual Studio) and PowerShell (pwsh preferred, powershell.exe works too).
Helper scripts are in the same directory as this SKILL.md (.claude/skills/winui-runtime-tests/):
setup-cert.ps1— One-time certificate generation + trust (requires admin elevation once)install-msix.ps1— Remove old package + install built MSIXrun-tests.ps1— Launch app and wait for test resultscleanup.ps1— Uninstall package
Critical Pitfalls (Read First)
These are real issues encountered in practice — not theoretical:
-
MSBuild switch syntax in bash: Forward-slash switches (
/r,/p:) are interpreted as Unix paths by bash. Always use dash syntax:-restore,-t:Publish,-p:Configuration=Release. -
PowerShell from bash: Complex PowerShell with
$(),$_,.Propertygets mangled by bash escaping. Always write a.ps1file and run withpwsh -NoProfile -File script.ps1instead of inline-Commandstrings. The helper scripts in this skill directory handle this for you. -
Cert:PowerShell drive may not work: On some environments theCert:\PSDrive and PKI module are unavailable (even in Windows PowerShell 5.1). Always usecertutilcommand-line tool instead ofNew-SelfSignedCertificate,Import-PfxCertificate,Export-Certificate, etc. Thecertutiltool works everywhere. -
Signing certificate: CI uses a secret cert. Locally,
setup-cert.ps1generates a unique self-signed cert per machine viacertreq. The private key never leaves the local cert store and is not committed to source control. The thumbprint is saved to~/.uno-dev-cert-thumbprint(user home — shared across all worktrees).
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed 7f5bbcf17202
- 4d ago First seen · 448 lines · 35 tokens per session scan A 8c25e7b455e5
winui-runtime-tests is a skill published in the GitHub repository unoplatform/uno (10,032 stars, last pushed today), licensed Apache-2.0. It adds 35 tokens to every session and 6,249 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
solopi-ai
通过 SoloPi 的机器可读 CLI 编译和执行 AI 验证计划，管理签名端侧 ExecuTorch 决策模型、持久设备池、无人值守任务、安卓设备、应用、动作、配置、用例步骤与交互录制、回放及性能历史、动态 Agent、批量与重复执行、性能监控、压力测试和证据。适用于需求/AC 到 Result Judge 三态结论、cloud/on-device 决策切换、模型发布门禁，以及 generation 租约的多设备 CI 执行。.
gradle-expert
Build optimization, dependency resolution, and multi-module KMP troubleshooting for AmethystMultiplatform. Use when working with: (1) Gradle build files (build.gradle.kts, settings.gradle), (2) Version catalog (libs.versions.toml), (3) Build errors and dependency conflicts, (4) Module dependencies and source sets, (5)…
nip85-trusted-assertions
The NIP-85 trusted-assertions model in Quartz (nip85TrustedAssertions/) — kind 10040 trust-provider lists, kind 30382 contact cards / user assertions, 30383 event assertions, 30384 addressable assertions, 30385 external-id assertions. Use when building or parsing these events, working with the typed tags (RankTag…
argent-tv-interact
Control and inspect TV apps via argent — Apple TV (tvOS), Android TV (leanback), and Amazon Fire TV (Vega). Boot the target, read focus, navigate with the D-pad remote, type, screenshot, and on Vega debug the JS runtime (evaluate, console logs, network inspector). Use when a task targets a TV (runtimeKind "tv", or…
web-preview
Flutter Web版をビルド → サーバー起動 → Playwright でアクセス確認 → URLをユーザーに案内する。.
JavaScript Tooling
Development tools, linting, and testing for JavaScript projects.