windows-authenticode-signer

SkillDev tools

Sign Windows executables with Authenticode using signtool, supporting EV and standard certificates

Instructions available. Your AI can read the instructions. Execution depends on the setup they require.

Account requirements not reviewed. Check the skill instructions before use; ahel provides instructions and does not run this skill.

Add ahel to your AI once: Claude, ChatGPT, Cursor, Claude Code or Codex. Then ask it to use this.

Then ask your AI: use the windows-authenticode-signer skill

What this skill tells your AI

The instructions your AI receives, as published by a5c-ai/babysitter in library/specializations/desktop-development/skills/windows-authenticode-signer/SKILL.md and read by ahel’s review.

Sign Windows executables with Authenticode using signtool. This skill configures code signing for Windows applications with standard and EV certificates, timestamping, and CI/CD integration.

Capabilities

Sign executables with Authenticode
Configure EV certificate signing
Set up timestamping servers
Sign with Azure Key Vault
Configure CI/CD signing workflows
Verify existing signatures
Sign DLLs and nested binaries
Configure dual SHA1/SHA256 signing

Input Schema

{
  "type": "object",
  "properties": {
    "executablePath": { "type": "string" },
    "certificateSource": { "enum": ["file", "store", "azure-keyvault", "digicert"] },
    "timestampServer": { "type": "string" },
    "hashAlgorithm": { "enum": ["SHA256", "SHA1", "dual"] }
  },
  "required": ["executablePath"]
}

Signing Commands

# Sign with PFX file
signtool sign /f certificate.pfx /p password /fd SHA256 /tr http://timestamp.digicert.com /td SHA256 MyApp.exe

# Sign with certificate store
signtool sign /n "My Company" /fd SHA256 /tr http://timestamp.digicert.com /td SHA256 MyApp.exe

# Sign with Azure Key Vault
AzureSignTool sign -kvu https://myvault.vault.azure.net -kvi $AZURE_CLIENT_ID -kvt $AZURE_TENANT_ID -kvs $AZURE_CLIENT_SECRET -kvc MyCertificate -tr http://timestamp.digicert.com -td sha256 MyApp.exe

Verification

signtool verify /pa /v MyApp.exe

Related Skills

msix-package-generator
code-signing-setup process

Signals

GitHub stars: 2k
Forks: 112
Last commit: Sep 2026

Advanced

Item type: skill
Key: windows-authenticode-signer
Source: github.com/a5c-ai/babysitter

github.com/a5c-ai/babysitter