windows-authenticode-signer

SkillDev tools

Sign Windows executables with Authenticode using signtool, supporting EV and standard certificates

Use windows-authenticode-signer in Claude, ChatGPT or Ahel Desktop

Free. Sign in, add windows-authenticode-signer and connect your AI. About a minute.

Also: Claude Code · Cursor · Codex

Then ask your AI: use the windows-authenticode-signer skill

Details

Instructions available. Your AI can read the instructions. Execution depends on the setup they require.

Add Ahel to your AI once: Claude, ChatGPT, Cursor, Claude Code or Codex. Then ask it to use this.

windows-authenticode-signerStart free

What this skill tells your AI

The instructions your AI receives, as published by a5c-ai/babysitter in library/specializations/desktop-development/skills/windows-authenticode-signer/SKILL.md and read by Ahel’s review.

Sign Windows executables with Authenticode using signtool. This skill configures code signing for Windows applications with standard and EV certificates, timestamping, and CI/CD integration.

Capabilities

  • Sign executables with Authenticode
  • Configure EV certificate signing
  • Set up timestamping servers
  • Sign with Azure Key Vault
  • Configure CI/CD signing workflows
  • Verify existing signatures
  • Sign DLLs and nested binaries
  • Configure dual SHA1/SHA256 signing

Input Schema

{
  "type": "object",
  "properties": {
    "executablePath": { "type": "string" },
    "certificateSource": { "enum": ["file", "store", "azure-keyvault", "digicert"] },
    "timestampServer": { "type": "string" },
    "hashAlgorithm": { "enum": ["SHA256", "SHA1", "dual"] }
  },
  "required": ["executablePath"]
}

Signing Commands

# Sign with PFX file
signtool sign /f certificate.pfx /p password /fd SHA256 /tr http://timestamp.digicert.com /td SHA256 MyApp.exe

# Sign with certificate store
signtool sign /n "My Company" /fd SHA256 /tr http://timestamp.digicert.com /td SHA256 MyApp.exe

# Sign with Azure Key Vault
AzureSignTool sign -kvu https://myvault.vault.azure.net -kvi $AZURE_CLIENT_ID -kvt $AZURE_TENANT_ID -kvs $AZURE_CLIENT_SECRET -kvc MyCertificate -tr http://timestamp.digicert.com -td sha256 MyApp.exe

Verification

signtool verify /pa /v MyApp.exe

Related Skills

  • msix-package-generator
  • code-signing-setup process

Signals

GitHub stars
2k
Forks
113
Last commit
Sep 2026
Advanced
Item type
skill
Key
windows-authenticode-signer
Source
github.com/a5c-ai/babysitter