[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-dotnet-maui-auth-secure-storage":3,"mdc--j7boqp-key":49,"related-org-dotnet-maui-auth-secure-storage":790,"related-repo-dotnet-maui-auth-secure-storage":955},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":11,"stars":28,"repoUrl":29,"updatedAt":30,"license":31,"forks":32,"topics":33,"repo":44,"sourceUrl":47,"mdContent":48},"maui-auth-secure-storage","implement MAUI authentication and secure storage","Implement .NET MAUI authentication and secure storage flows with WebAuthenticator, MSAL.NET, platform callback URIs, token caches, brokers, SecureStorage, logout cleanup, and Blazor Hybrid auth handoff. USE FOR: login\u002Flogout, OAuth\u002FOIDC redirects, Entra ID, CallbackUrl, WebAuthenticatorCallbackActivity, Android intent filters, CFBundleURLTypes, MSAL redirect URI\u002FBrokerRedirectUri, AcquireTokenSilent, RemoveAsync\u002FGetAccountsAsync token cache cleanup, secure token storage, and native-to-Blazor auth state. DO NOT USE FOR: architecture, API retries\u002Foffline behavior, or UI debugging.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},"dotnet",".NET (Microsoft)","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Fdotnet.png",[12,16,19,22,25],{"name":13,"slug":14,"type":15},"Security","security","tag",{"name":17,"slug":18,"type":15},"C#","csharp",{"name":20,"slug":21,"type":15},"Auth","auth",{"name":23,"slug":24,"type":15},"MAUI","maui",{"name":26,"slug":27,"type":15},"Mobile","mobile",190,"https:\u002F\u002Fgithub.com\u002Fdotnet\u002Fmaui-labs","2026-07-12T08:22:33.514169",null,21,[34,35,36,8,37,38,24,39,40,27,41,42,43],"ai","android","desktop","ios","maccatalyst","mcp","microsoft","multi-platform","user-interface","winui",{"repoUrl":29,"stars":28,"forks":32,"topics":45,"description":46},[34,35,36,8,37,38,24,39,40,27,41,42,43],"Experimental and pre-release tools for .NET MAUI","https:\u002F\u002Fgithub.com\u002Fdotnet\u002Fmaui-labs\u002Ftree\u002FHEAD\u002Fplugins\u002Fdotnet-maui-app\u002Fskills\u002Fmaui-auth-secure-storage","---\nname: maui-auth-secure-storage\ndescription: >-\n  Implement .NET MAUI authentication and secure storage flows with WebAuthenticator, MSAL.NET, platform callback URIs, token caches, brokers, SecureStorage, logout cleanup, and Blazor Hybrid auth handoff. USE FOR: login\u002Flogout, OAuth\u002FOIDC redirects, Entra ID, CallbackUrl, WebAuthenticatorCallbackActivity, Android intent filters, CFBundleURLTypes, MSAL redirect URI\u002FBrokerRedirectUri, AcquireTokenSilent, RemoveAsync\u002FGetAccountsAsync token cache cleanup, secure token storage, and native-to-Blazor auth state. DO NOT USE FOR: architecture, API retries\u002Foffline behavior, or UI debugging.\n---\n\n# MAUI Auth and Secure Storage\n\nUse this skill when a MAUI app needs sign-in, token handling, secure local\nsecrets, or auth state shared between native pages and Blazor Hybrid UI.\n\n## Workflow\n\n1. Inspect target frameworks, package references, `MauiProgram.cs`, platform\n   manifests\u002Fplists, and existing auth abstractions.\n2. Choose the auth primitive:\n   - Use `WebAuthenticator` for provider-neutral OAuth\u002FOIDC browser redirects.\n   - Use MSAL.NET for Microsoft Entra ID, account selection, silent token\n     acquisition, and broker integration.\n3. Register redirect URIs in both the identity provider and platform app\n   configuration. The scheme\u002Fhost must match exactly.\n4. Keep auth behind an injected service such as `IAuthService`; do not put token\n   acquisition logic directly in pages or ViewModels.\n5. Let MSAL own its token cache when using MSAL. Use `SecureStorage` for\n   app-owned secrets, small encrypted values, and non-MSAL providers only when\n   the provider requires app-managed refresh token storage.\n6. Handle cancellation, denied consent, and expired sessions as first-class UI\n   states instead of treating all auth failures as crashes.\n7. For Blazor Hybrid, hand native auth state into scoped services or an\n   `AuthenticationStateProvider`; do not rely on browser cookies or local\n   storage as the source of truth.\n\n## WebAuthenticator Pattern\n\n```csharp\nvar result = await WebAuthenticator.Default.AuthenticateAsync(\n    new WebAuthenticatorOptions\n    {\n        Url = authorizeUri,\n        CallbackUrl = new Uri(\"myapp:\u002F\u002Fauth\")\n    });\n\nif (result.Properties.TryGetValue(\"error\", out var error))\n{\n    throw new InvalidOperationException($\"Authentication failed: {error}\");\n}\n\nresult.Properties.TryGetValue(\"code\", out var code);\n```\n\nBuild the authorize URI with PKCE when the provider supports it. Exchange the\nauthorization code through a secure backend or a provider-supported public\nclient flow; do not embed client secrets in the app package.\n\n## MSAL.NET Pattern\n\n```csharp\nbuilder.Services.AddSingleton\u003CIAuthService, MsalAuthService>();\n```\n\nFor MSAL:\n\n- Configure redirect URIs in the Entra app registration and the platform app.\n- Build the public client with an explicit redirect URI, for example\n  `.WithRedirectUri(\"msal{client-id}:\u002F\u002Fauth\")` when using the default MAUI MSAL\n  public-client redirect pattern. Broker-capable apps must use the broker\n  redirect URI expected by the platform and app registration, often referred to\n  as the `BrokerRedirectUri` in MSAL setup guidance.\n- Prefer `AcquireTokenSilent` before interactive auth.\n- Use MSAL's platform token cache for MAUI mobile targets and verify persistence\n  on each target platform. Add custom token-cache serialization only for\n  desktop, unsupported, or intentionally custom cache scenarios.\n- Use interactive auth only when there is no cached account, consent is needed,\n  or silent acquisition returns a UI-required result.\n- Inspect `MsalUiRequiredException.Classification`, error codes, and claims\n  before blindly retrying interactive auth. Conditional Access, compliant-device,\n  or Intune protection-policy failures may require compliance UX or Intune MAM\n  integration, not another generic prompt.\n- Opt into brokers only when the app registration, redirect URI, and platform\n  setup are broker-ready.\n- Store account identifiers or display names if needed; do not duplicate MSAL\n  access or refresh tokens into `Preferences`.\n- On logout, call `GetAccountsAsync()` and `RemoveAsync(account)` for cached\n  MSAL accounts before clearing app-owned auth state, so the next\n  `AcquireTokenSilent` cannot return the signed-out user's tokens.\n\n## Platform Redirect Checklist\n\n| Platform | Check |\n| --- | --- |\n| Android | For `WebAuthenticator`, add an Android activity subclass that inherits `Microsoft.Maui.Authentication.WebAuthenticatorCallbackActivity` and has an `IntentFilter` for the callback scheme\u002Fhost. Use MAUI namespaces, not Xamarin.Auth or Xamarin.Essentials callback types. For MSAL broker flows, use the broker-compatible redirect URI and signature hash expected by the app registration. |\n| iOS\u002FMac Catalyst | Add `CFBundleURLTypes` for the callback scheme. For MSAL broker flows, add `LSApplicationQueriesSchemes` entries such as `msauthv2` and `msauthv3` so MSAL can detect the broker, and match the redirect URI scheme configured in the app registration. |\n| Windows | Register the custom protocol in the package manifest or app identity configuration used by the target. |\n\n## SecureStorage Guardrails\n\n- Use `SecureStorage.Default.GetAsync`, `SetAsync`, and `Remove` for small\n  secrets only.\n- Treat missing values as normal after reinstall, backup restore, device lock\n  changes, or secure store reset.\n- On Mac Catalyst, configure Keychain Sharing in\n  `Platforms\u002FMacCatalyst\u002FEntitlements.plist`; secure storage calls fail without\n  the required keychain entitlement.\n- On iOS and Mac Catalyst, app extensions cannot read the host app's secure\n  values unless a shared keychain access group is configured in both host and\n  extension entitlements.\n- Store expiration metadata with app-owned tokens and refresh before use.\n- Prefer a backend token exchange when a provider requires confidential client\n  secrets.\n- Never log tokens, authorization codes, `id_token` values, refresh tokens, or\n  full callback URLs.\n\n## Blazor Hybrid Auth Handoff\n\n- Register the native auth\u002Fsession service in MAUI DI and consume it from Razor\n  components through DI.\n- Implement a custom `AuthenticationStateProvider` when Razor components need\n  `[Authorize]` or `AuthorizeView`.\n- Attach bearer tokens through a typed `HttpClient` handler that asks the native\n  auth service for a fresh access token.\n- Clear MSAL accounts with `RemoveAsync`, app-owned `SecureStorage` values, and\n  Blazor auth state on logout.\n\n## Validation Checklist\n\n- Redirect URI values match across provider registration and platform files.\n- Auth flows use PKCE or MSAL public-client patterns and contain no client\n  secrets.\n- Silent token acquisition is attempted before interactive MSAL prompts.\n- Logout clears MSAL cached accounts with `RemoveAsync` and invalidates Blazor\n  auth state when used.\n- Secure values are stored only in `SecureStorage` or the library-owned cache.\n- Blazor Hybrid components receive auth state through DI, not browser-only\n  storage.\n",{"data":50,"body":51},{"name":4,"description":6},{"type":52,"children":53},"root",[54,63,69,76,171,177,306,311,317,331,336,447,453,574,580,657,663,731,737,784],{"type":55,"tag":56,"props":57,"children":59},"element","h1",{"id":58},"maui-auth-and-secure-storage",[60],{"type":61,"value":62},"text","MAUI Auth and Secure Storage",{"type":55,"tag":64,"props":65,"children":66},"p",{},[67],{"type":61,"value":68},"Use this skill when a MAUI app needs sign-in, token handling, secure local\nsecrets, or auth state shared between native pages and Blazor Hybrid UI.",{"type":55,"tag":70,"props":71,"children":73},"h2",{"id":72},"workflow",[74],{"type":61,"value":75},"Workflow",{"type":55,"tag":77,"props":78,"children":79},"ol",{},[80,95,122,127,140,153,158],{"type":55,"tag":81,"props":82,"children":83},"li",{},[84,86,93],{"type":61,"value":85},"Inspect target frameworks, package references, ",{"type":55,"tag":87,"props":88,"children":90},"code",{"className":89},[],[91],{"type":61,"value":92},"MauiProgram.cs",{"type":61,"value":94},", platform\nmanifests\u002Fplists, and existing auth abstractions.",{"type":55,"tag":81,"props":96,"children":97},{},[98,100],{"type":61,"value":99},"Choose the auth primitive:\n",{"type":55,"tag":101,"props":102,"children":103},"ul",{},[104,117],{"type":55,"tag":81,"props":105,"children":106},{},[107,109,115],{"type":61,"value":108},"Use ",{"type":55,"tag":87,"props":110,"children":112},{"className":111},[],[113],{"type":61,"value":114},"WebAuthenticator",{"type":61,"value":116}," for provider-neutral OAuth\u002FOIDC browser redirects.",{"type":55,"tag":81,"props":118,"children":119},{},[120],{"type":61,"value":121},"Use MSAL.NET for Microsoft Entra ID, account selection, silent token\nacquisition, and broker integration.",{"type":55,"tag":81,"props":123,"children":124},{},[125],{"type":61,"value":126},"Register redirect URIs in both the identity provider and platform app\nconfiguration. The scheme\u002Fhost must match exactly.",{"type":55,"tag":81,"props":128,"children":129},{},[130,132,138],{"type":61,"value":131},"Keep auth behind an injected service such as ",{"type":55,"tag":87,"props":133,"children":135},{"className":134},[],[136],{"type":61,"value":137},"IAuthService",{"type":61,"value":139},"; do not put token\nacquisition logic directly in pages or ViewModels.",{"type":55,"tag":81,"props":141,"children":142},{},[143,145,151],{"type":61,"value":144},"Let MSAL own its token cache when using MSAL. Use ",{"type":55,"tag":87,"props":146,"children":148},{"className":147},[],[149],{"type":61,"value":150},"SecureStorage",{"type":61,"value":152}," for\napp-owned secrets, small encrypted values, and non-MSAL providers only when\nthe provider requires app-managed refresh token storage.",{"type":55,"tag":81,"props":154,"children":155},{},[156],{"type":61,"value":157},"Handle cancellation, denied consent, and expired sessions as first-class UI\nstates instead of treating all auth failures as crashes.",{"type":55,"tag":81,"props":159,"children":160},{},[161,163,169],{"type":61,"value":162},"For Blazor Hybrid, hand native auth state into scoped services or an\n",{"type":55,"tag":87,"props":164,"children":166},{"className":165},[],[167],{"type":61,"value":168},"AuthenticationStateProvider",{"type":61,"value":170},"; do not rely on browser cookies or local\nstorage as the source of truth.",{"type":55,"tag":70,"props":172,"children":174},{"id":173},"webauthenticator-pattern",[175],{"type":61,"value":176},"WebAuthenticator Pattern",{"type":55,"tag":178,"props":179,"children":183},"pre",{"className":180,"code":181,"language":18,"meta":182,"style":182},"language-csharp shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","var result = await WebAuthenticator.Default.AuthenticateAsync(\n    new WebAuthenticatorOptions\n    {\n        Url = authorizeUri,\n        CallbackUrl = new Uri(\"myapp:\u002F\u002Fauth\")\n    });\n\nif (result.Properties.TryGetValue(\"error\", out var error))\n{\n    throw new InvalidOperationException($\"Authentication failed: {error}\");\n}\n\nresult.Properties.TryGetValue(\"code\", out var code);\n","",[184],{"type":55,"tag":87,"props":185,"children":186},{"__ignoreMap":182},[187,198,207,216,225,234,243,253,262,271,280,289,297],{"type":55,"tag":188,"props":189,"children":192},"span",{"class":190,"line":191},"line",1,[193],{"type":55,"tag":188,"props":194,"children":195},{},[196],{"type":61,"value":197},"var result = await WebAuthenticator.Default.AuthenticateAsync(\n",{"type":55,"tag":188,"props":199,"children":201},{"class":190,"line":200},2,[202],{"type":55,"tag":188,"props":203,"children":204},{},[205],{"type":61,"value":206},"    new WebAuthenticatorOptions\n",{"type":55,"tag":188,"props":208,"children":210},{"class":190,"line":209},3,[211],{"type":55,"tag":188,"props":212,"children":213},{},[214],{"type":61,"value":215},"    {\n",{"type":55,"tag":188,"props":217,"children":219},{"class":190,"line":218},4,[220],{"type":55,"tag":188,"props":221,"children":222},{},[223],{"type":61,"value":224},"        Url = authorizeUri,\n",{"type":55,"tag":188,"props":226,"children":228},{"class":190,"line":227},5,[229],{"type":55,"tag":188,"props":230,"children":231},{},[232],{"type":61,"value":233},"        CallbackUrl = new Uri(\"myapp:\u002F\u002Fauth\")\n",{"type":55,"tag":188,"props":235,"children":237},{"class":190,"line":236},6,[238],{"type":55,"tag":188,"props":239,"children":240},{},[241],{"type":61,"value":242},"    });\n",{"type":55,"tag":188,"props":244,"children":246},{"class":190,"line":245},7,[247],{"type":55,"tag":188,"props":248,"children":250},{"emptyLinePlaceholder":249},true,[251],{"type":61,"value":252},"\n",{"type":55,"tag":188,"props":254,"children":256},{"class":190,"line":255},8,[257],{"type":55,"tag":188,"props":258,"children":259},{},[260],{"type":61,"value":261},"if (result.Properties.TryGetValue(\"error\", out var error))\n",{"type":55,"tag":188,"props":263,"children":265},{"class":190,"line":264},9,[266],{"type":55,"tag":188,"props":267,"children":268},{},[269],{"type":61,"value":270},"{\n",{"type":55,"tag":188,"props":272,"children":274},{"class":190,"line":273},10,[275],{"type":55,"tag":188,"props":276,"children":277},{},[278],{"type":61,"value":279},"    throw new InvalidOperationException($\"Authentication failed: {error}\");\n",{"type":55,"tag":188,"props":281,"children":283},{"class":190,"line":282},11,[284],{"type":55,"tag":188,"props":285,"children":286},{},[287],{"type":61,"value":288},"}\n",{"type":55,"tag":188,"props":290,"children":292},{"class":190,"line":291},12,[293],{"type":55,"tag":188,"props":294,"children":295},{"emptyLinePlaceholder":249},[296],{"type":61,"value":252},{"type":55,"tag":188,"props":298,"children":300},{"class":190,"line":299},13,[301],{"type":55,"tag":188,"props":302,"children":303},{},[304],{"type":61,"value":305},"result.Properties.TryGetValue(\"code\", out var code);\n",{"type":55,"tag":64,"props":307,"children":308},{},[309],{"type":61,"value":310},"Build the authorize URI with PKCE when the provider supports it. Exchange the\nauthorization code through a secure backend or a provider-supported public\nclient flow; do not embed client secrets in the app package.",{"type":55,"tag":70,"props":312,"children":314},{"id":313},"msalnet-pattern",[315],{"type":61,"value":316},"MSAL.NET Pattern",{"type":55,"tag":178,"props":318,"children":320},{"className":180,"code":319,"language":18,"meta":182,"style":182},"builder.Services.AddSingleton\u003CIAuthService, MsalAuthService>();\n",[321],{"type":55,"tag":87,"props":322,"children":323},{"__ignoreMap":182},[324],{"type":55,"tag":188,"props":325,"children":326},{"class":190,"line":191},[327],{"type":55,"tag":188,"props":328,"children":329},{},[330],{"type":61,"value":319},{"type":55,"tag":64,"props":332,"children":333},{},[334],{"type":61,"value":335},"For MSAL:",{"type":55,"tag":101,"props":337,"children":338},{},[339,344,365,378,383,388,401,406,419],{"type":55,"tag":81,"props":340,"children":341},{},[342],{"type":61,"value":343},"Configure redirect URIs in the Entra app registration and the platform app.",{"type":55,"tag":81,"props":345,"children":346},{},[347,349,355,357,363],{"type":61,"value":348},"Build the public client with an explicit redirect URI, for example\n",{"type":55,"tag":87,"props":350,"children":352},{"className":351},[],[353],{"type":61,"value":354},".WithRedirectUri(\"msal{client-id}:\u002F\u002Fauth\")",{"type":61,"value":356}," when using the default MAUI MSAL\npublic-client redirect pattern. Broker-capable apps must use the broker\nredirect URI expected by the platform and app registration, often referred to\nas the ",{"type":55,"tag":87,"props":358,"children":360},{"className":359},[],[361],{"type":61,"value":362},"BrokerRedirectUri",{"type":61,"value":364}," in MSAL setup guidance.",{"type":55,"tag":81,"props":366,"children":367},{},[368,370,376],{"type":61,"value":369},"Prefer ",{"type":55,"tag":87,"props":371,"children":373},{"className":372},[],[374],{"type":61,"value":375},"AcquireTokenSilent",{"type":61,"value":377}," before interactive auth.",{"type":55,"tag":81,"props":379,"children":380},{},[381],{"type":61,"value":382},"Use MSAL's platform token cache for MAUI mobile targets and verify persistence\non each target platform. Add custom token-cache serialization only for\ndesktop, unsupported, or intentionally custom cache scenarios.",{"type":55,"tag":81,"props":384,"children":385},{},[386],{"type":61,"value":387},"Use interactive auth only when there is no cached account, consent is needed,\nor silent acquisition returns a UI-required result.",{"type":55,"tag":81,"props":389,"children":390},{},[391,393,399],{"type":61,"value":392},"Inspect ",{"type":55,"tag":87,"props":394,"children":396},{"className":395},[],[397],{"type":61,"value":398},"MsalUiRequiredException.Classification",{"type":61,"value":400},", error codes, and claims\nbefore blindly retrying interactive auth. Conditional Access, compliant-device,\nor Intune protection-policy failures may require compliance UX or Intune MAM\nintegration, not another generic prompt.",{"type":55,"tag":81,"props":402,"children":403},{},[404],{"type":61,"value":405},"Opt into brokers only when the app registration, redirect URI, and platform\nsetup are broker-ready.",{"type":55,"tag":81,"props":407,"children":408},{},[409,411,417],{"type":61,"value":410},"Store account identifiers or display names if needed; do not duplicate MSAL\naccess or refresh tokens into ",{"type":55,"tag":87,"props":412,"children":414},{"className":413},[],[415],{"type":61,"value":416},"Preferences",{"type":61,"value":418},".",{"type":55,"tag":81,"props":420,"children":421},{},[422,424,430,432,438,440,445],{"type":61,"value":423},"On logout, call ",{"type":55,"tag":87,"props":425,"children":427},{"className":426},[],[428],{"type":61,"value":429},"GetAccountsAsync()",{"type":61,"value":431}," and ",{"type":55,"tag":87,"props":433,"children":435},{"className":434},[],[436],{"type":61,"value":437},"RemoveAsync(account)",{"type":61,"value":439}," for cached\nMSAL accounts before clearing app-owned auth state, so the next\n",{"type":55,"tag":87,"props":441,"children":443},{"className":442},[],[444],{"type":61,"value":375},{"type":61,"value":446}," cannot return the signed-out user's tokens.",{"type":55,"tag":70,"props":448,"children":450},{"id":449},"platform-redirect-checklist",[451],{"type":61,"value":452},"Platform Redirect Checklist",{"type":55,"tag":454,"props":455,"children":456},"table",{},[457,476],{"type":55,"tag":458,"props":459,"children":460},"thead",{},[461],{"type":55,"tag":462,"props":463,"children":464},"tr",{},[465,471],{"type":55,"tag":466,"props":467,"children":468},"th",{},[469],{"type":61,"value":470},"Platform",{"type":55,"tag":466,"props":472,"children":473},{},[474],{"type":61,"value":475},"Check",{"type":55,"tag":477,"props":478,"children":479},"tbody",{},[480,517,561],{"type":55,"tag":462,"props":481,"children":482},{},[483,489],{"type":55,"tag":484,"props":485,"children":486},"td",{},[487],{"type":61,"value":488},"Android",{"type":55,"tag":484,"props":490,"children":491},{},[492,494,499,501,507,509,515],{"type":61,"value":493},"For ",{"type":55,"tag":87,"props":495,"children":497},{"className":496},[],[498],{"type":61,"value":114},{"type":61,"value":500},", add an Android activity subclass that inherits ",{"type":55,"tag":87,"props":502,"children":504},{"className":503},[],[505],{"type":61,"value":506},"Microsoft.Maui.Authentication.WebAuthenticatorCallbackActivity",{"type":61,"value":508}," and has an ",{"type":55,"tag":87,"props":510,"children":512},{"className":511},[],[513],{"type":61,"value":514},"IntentFilter",{"type":61,"value":516}," for the callback scheme\u002Fhost. Use MAUI namespaces, not Xamarin.Auth or Xamarin.Essentials callback types. For MSAL broker flows, use the broker-compatible redirect URI and signature hash expected by the app registration.",{"type":55,"tag":462,"props":518,"children":519},{},[520,525],{"type":55,"tag":484,"props":521,"children":522},{},[523],{"type":61,"value":524},"iOS\u002FMac Catalyst",{"type":55,"tag":484,"props":526,"children":527},{},[528,530,536,538,544,546,552,553,559],{"type":61,"value":529},"Add ",{"type":55,"tag":87,"props":531,"children":533},{"className":532},[],[534],{"type":61,"value":535},"CFBundleURLTypes",{"type":61,"value":537}," for the callback scheme. For MSAL broker flows, add ",{"type":55,"tag":87,"props":539,"children":541},{"className":540},[],[542],{"type":61,"value":543},"LSApplicationQueriesSchemes",{"type":61,"value":545}," entries such as ",{"type":55,"tag":87,"props":547,"children":549},{"className":548},[],[550],{"type":61,"value":551},"msauthv2",{"type":61,"value":431},{"type":55,"tag":87,"props":554,"children":556},{"className":555},[],[557],{"type":61,"value":558},"msauthv3",{"type":61,"value":560}," so MSAL can detect the broker, and match the redirect URI scheme configured in the app registration.",{"type":55,"tag":462,"props":562,"children":563},{},[564,569],{"type":55,"tag":484,"props":565,"children":566},{},[567],{"type":61,"value":568},"Windows",{"type":55,"tag":484,"props":570,"children":571},{},[572],{"type":61,"value":573},"Register the custom protocol in the package manifest or app identity configuration used by the target.",{"type":55,"tag":70,"props":575,"children":577},{"id":576},"securestorage-guardrails",[578],{"type":61,"value":579},"SecureStorage Guardrails",{"type":55,"tag":101,"props":581,"children":582},{},[583,611,616,629,634,639,644],{"type":55,"tag":81,"props":584,"children":585},{},[586,587,593,595,601,603,609],{"type":61,"value":108},{"type":55,"tag":87,"props":588,"children":590},{"className":589},[],[591],{"type":61,"value":592},"SecureStorage.Default.GetAsync",{"type":61,"value":594},", ",{"type":55,"tag":87,"props":596,"children":598},{"className":597},[],[599],{"type":61,"value":600},"SetAsync",{"type":61,"value":602},", and ",{"type":55,"tag":87,"props":604,"children":606},{"className":605},[],[607],{"type":61,"value":608},"Remove",{"type":61,"value":610}," for small\nsecrets only.",{"type":55,"tag":81,"props":612,"children":613},{},[614],{"type":61,"value":615},"Treat missing values as normal after reinstall, backup restore, device lock\nchanges, or secure store reset.",{"type":55,"tag":81,"props":617,"children":618},{},[619,621,627],{"type":61,"value":620},"On Mac Catalyst, configure Keychain Sharing in\n",{"type":55,"tag":87,"props":622,"children":624},{"className":623},[],[625],{"type":61,"value":626},"Platforms\u002FMacCatalyst\u002FEntitlements.plist",{"type":61,"value":628},"; secure storage calls fail without\nthe required keychain entitlement.",{"type":55,"tag":81,"props":630,"children":631},{},[632],{"type":61,"value":633},"On iOS and Mac Catalyst, app extensions cannot read the host app's secure\nvalues unless a shared keychain access group is configured in both host and\nextension entitlements.",{"type":55,"tag":81,"props":635,"children":636},{},[637],{"type":61,"value":638},"Store expiration metadata with app-owned tokens and refresh before use.",{"type":55,"tag":81,"props":640,"children":641},{},[642],{"type":61,"value":643},"Prefer a backend token exchange when a provider requires confidential client\nsecrets.",{"type":55,"tag":81,"props":645,"children":646},{},[647,649,655],{"type":61,"value":648},"Never log tokens, authorization codes, ",{"type":55,"tag":87,"props":650,"children":652},{"className":651},[],[653],{"type":61,"value":654},"id_token",{"type":61,"value":656}," values, refresh tokens, or\nfull callback URLs.",{"type":55,"tag":70,"props":658,"children":660},{"id":659},"blazor-hybrid-auth-handoff",[661],{"type":61,"value":662},"Blazor Hybrid Auth Handoff",{"type":55,"tag":101,"props":664,"children":665},{},[666,671,698,711],{"type":55,"tag":81,"props":667,"children":668},{},[669],{"type":61,"value":670},"Register the native auth\u002Fsession service in MAUI DI and consume it from Razor\ncomponents through DI.",{"type":55,"tag":81,"props":672,"children":673},{},[674,676,681,683,689,691,697],{"type":61,"value":675},"Implement a custom ",{"type":55,"tag":87,"props":677,"children":679},{"className":678},[],[680],{"type":61,"value":168},{"type":61,"value":682}," when Razor components need\n",{"type":55,"tag":87,"props":684,"children":686},{"className":685},[],[687],{"type":61,"value":688},"[Authorize]",{"type":61,"value":690}," or ",{"type":55,"tag":87,"props":692,"children":694},{"className":693},[],[695],{"type":61,"value":696},"AuthorizeView",{"type":61,"value":418},{"type":55,"tag":81,"props":699,"children":700},{},[701,703,709],{"type":61,"value":702},"Attach bearer tokens through a typed ",{"type":55,"tag":87,"props":704,"children":706},{"className":705},[],[707],{"type":61,"value":708},"HttpClient",{"type":61,"value":710}," handler that asks the native\nauth service for a fresh access token.",{"type":55,"tag":81,"props":712,"children":713},{},[714,716,722,724,729],{"type":61,"value":715},"Clear MSAL accounts with ",{"type":55,"tag":87,"props":717,"children":719},{"className":718},[],[720],{"type":61,"value":721},"RemoveAsync",{"type":61,"value":723},", app-owned ",{"type":55,"tag":87,"props":725,"children":727},{"className":726},[],[728],{"type":61,"value":150},{"type":61,"value":730}," values, and\nBlazor auth state on logout.",{"type":55,"tag":70,"props":732,"children":734},{"id":733},"validation-checklist",[735],{"type":61,"value":736},"Validation Checklist",{"type":55,"tag":101,"props":738,"children":739},{},[740,745,750,755,767,779],{"type":55,"tag":81,"props":741,"children":742},{},[743],{"type":61,"value":744},"Redirect URI values match across provider registration and platform files.",{"type":55,"tag":81,"props":746,"children":747},{},[748],{"type":61,"value":749},"Auth flows use PKCE or MSAL public-client patterns and contain no client\nsecrets.",{"type":55,"tag":81,"props":751,"children":752},{},[753],{"type":61,"value":754},"Silent token acquisition is attempted before interactive MSAL prompts.",{"type":55,"tag":81,"props":756,"children":757},{},[758,760,765],{"type":61,"value":759},"Logout clears MSAL cached accounts with ",{"type":55,"tag":87,"props":761,"children":763},{"className":762},[],[764],{"type":61,"value":721},{"type":61,"value":766}," and invalidates Blazor\nauth state when used.",{"type":55,"tag":81,"props":768,"children":769},{},[770,772,777],{"type":61,"value":771},"Secure values are stored only in ",{"type":55,"tag":87,"props":773,"children":775},{"className":774},[],[776],{"type":61,"value":150},{"type":61,"value":778}," or the library-owned cache.",{"type":55,"tag":81,"props":780,"children":781},{},[782],{"type":61,"value":783},"Blazor Hybrid components receive auth state through DI, not browser-only\nstorage.",{"type":55,"tag":785,"props":786,"children":787},"style",{},[788],{"type":61,"value":789},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"items":791,"total":954},[792,810,827,839,856,870,888,898,910,920,933,944],{"slug":793,"name":793,"fn":794,"description":795,"org":796,"tags":797,"stars":807,"repoUrl":808,"updatedAt":809},"multithreaded-task-migration","migrate MSBuild tasks to multithreaded mode","Guide for migrating MSBuild tasks to multithreaded mode support, including compatibility red-team review. Use this when converting tasks to thread-safe versions, implementing IMultiThreadableTask, adding TaskEnvironment support, or auditing migrations for behavioral compatibility.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[798,801,804],{"name":799,"slug":800,"type":15},".NET","net",{"name":802,"slug":803,"type":15},"Engineering","engineering",{"name":805,"slug":806,"type":15},"Performance","performance",5535,"https:\u002F\u002Fgithub.com\u002Fdotnet\u002Fmsbuild","2026-07-22T05:37:33.965588",{"slug":811,"name":811,"fn":812,"description":813,"org":814,"tags":815,"stars":824,"repoUrl":825,"updatedAt":826},"analyzing-dotnet-performance","analyze .NET code for performance anti-patterns","Scans .NET code for ~50 performance anti-patterns across async, memory, strings, collections, LINQ, regex, serialization, and I\u002FO with tiered severity classification. Use when analyzing .NET code for optimization opportunities, reviewing hot paths, or auditing allocation-heavy patterns.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[816,817,820,823],{"name":799,"slug":800,"type":15},{"name":818,"slug":819,"type":15},"Code Analysis","code-analysis",{"name":821,"slug":822,"type":15},"Debugging","debugging",{"name":805,"slug":806,"type":15},4576,"https:\u002F\u002Fgithub.com\u002Fdotnet\u002Fskills","2026-07-12T08:23:25.400375",{"slug":828,"name":828,"fn":829,"description":830,"org":831,"tags":832,"stars":824,"repoUrl":825,"updatedAt":838},"android-tombstone-symbolication","symbolicate .NET runtime frames in Android tombstones","Symbolicate the .NET runtime frames in an Android tombstone file. Extracts BuildIds and PC offsets from the native backtrace, downloads debug symbols from the Microsoft symbol server, and runs llvm-symbolizer to produce function names with source file and line numbers. USE FOR triaging a .NET MAUI or Mono Android app crash from a tombstone, resolving native backtrace frames in libmonosgen-2.0.so or libcoreclr.so to .NET runtime source code, or investigating SIGABRT, SIGSEGV, or other native signals originating from the .NET runtime on Android. DO NOT USE FOR pure Java\u002FKotlin crashes, managed .NET exceptions that are already captured in logcat, or iOS crash logs. INVOKES Symbolicate-Tombstone.ps1 script, llvm-symbolizer, Microsoft symbol server.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[833,834,835,836],{"name":799,"slug":800,"type":15},{"name":488,"slug":35,"type":15},{"name":821,"slug":822,"type":15},{"name":837,"slug":40,"type":15},"Microsoft","2026-07-12T08:23:21.595572",{"slug":840,"name":840,"fn":841,"description":842,"org":843,"tags":844,"stars":824,"repoUrl":825,"updatedAt":855},"apple-crash-symbolication","symbolicate .NET runtime frames in crash logs","Symbolicate .NET runtime frames in Apple platform .ips crash logs (iOS, tvOS, Mac Catalyst, macOS). Extracts UUIDs and addresses from the native backtrace, locates dSYM debug symbols, and runs atos to produce function names with source file and line numbers. Automatically downloads .dwarf symbols from the Microsoft symbol server using Mach-O UUIDs. USE FOR triaging a .NET MAUI or Mono app crash from an .ips file on any Apple platform, resolving native backtrace frames in libcoreclr or libmonosgen-2.0 to .NET runtime source code, retrieving .ips crash logs from a connected iOS device or iPhone, or investigating EXC_CRASH, EXC_BAD_ACCESS, SIGABRT, or SIGSEGV originating from the .NET runtime. DO NOT USE FOR pure Swift\u002FObjective-C crashes with no .NET components, or Android tombstone files. INVOKES Symbolicate-Crash.ps1 script, atos, dwarfdump, idevicecrashreport.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[845,846,847,849,852],{"name":799,"slug":800,"type":15},{"name":821,"slug":822,"type":15},{"name":848,"slug":37,"type":15},"iOS",{"name":850,"slug":851,"type":15},"macOS","macos",{"name":853,"slug":854,"type":15},"Observability","observability","2026-07-12T08:23:20.369986",{"slug":857,"name":857,"fn":858,"description":859,"org":860,"tags":861,"stars":824,"repoUrl":825,"updatedAt":869},"assertion-quality","evaluate assertion quality in test suites","Analyzes the variety and depth of assertions across test suites in any language. Use when the user asks to evaluate assertion quality, find shallow tests, identify assertion-free tests (no assertions or only trivial ones like Assert.IsNotNull \u002F toBeTruthy()), flag self-referential or tautological assertions, measure assertion diversity, or audit whether tests verify different facets of behavior. Polyglot: .NET, Python, TS\u002FJS, Java, Go, Ruby, Rust, Swift, Kotlin, PowerShell, C++. DO NOT USE FOR: writing new tests (use code-testing-agent \u002F writing-mstest-tests), mutation reasoning about whether tests would catch a bug (use test-gap-analysis), or a general severity-ranked anti-pattern audit (use test-anti-patterns), fixing or rewriting assertions, or writing, fixing, or modernizing MSTest tests, assertions, or attributes (use writing-mstest-tests).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[862,863,866],{"name":818,"slug":819,"type":15},{"name":864,"slug":865,"type":15},"QA","qa",{"name":867,"slug":868,"type":15},"Testing","testing","2026-07-12T08:23:51.277743",{"slug":871,"name":871,"fn":872,"description":873,"org":874,"tags":875,"stars":824,"repoUrl":825,"updatedAt":887},"author-component","create and review Blazor components","Create or review Blazor components (.razor files) with correct architecture. USE FOR: writing new Blazor components that do NOT involve JavaScript interop, implementing parameters and EventCallback, RenderFragment slots, component lifecycle (OnInitializedAsync, OnParametersSet), async patterns, IAsyncDisposable, CancellationToken, CSS isolation, code-behind. DO NOT USE FOR: creating new projects (use create-blazor-project), JavaScript interop or calling browser APIs from Blazor (use use-js-interop), forms and validation (use collect-user-input), prerendering issues (use support-prerendering), HTTP data fetching patterns (use fetch-and-send-data), coordinating state between unrelated components (use coordinate-components).\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[876,877,880,881,884],{"name":799,"slug":800,"type":15},{"name":878,"slug":879,"type":15},"Blazor","blazor",{"name":17,"slug":18,"type":15},{"name":882,"slug":883,"type":15},"UI Components","ui-components",{"name":885,"slug":886,"type":15},"Web Development","web-development","2026-07-15T06:03:29.216359",{"slug":889,"name":889,"fn":890,"description":891,"org":892,"tags":893,"stars":824,"repoUrl":825,"updatedAt":897},"binlog-failure-analysis","analyze MSBuild binary logs","Analyze MSBuild binary logs to diagnose build failures. USE FOR: build errors that are unclear from console output, diagnosing cascading failures across multi-project builds, tracing MSBuild target execution order, and generally any MSBuild build issues. Requires an existing .binlog file. DO NOT USE FOR: generating binlogs (use binlog-generation), non-MSBuild build systems.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[894,895,896],{"name":818,"slug":819,"type":15},{"name":821,"slug":822,"type":15},{"name":837,"slug":40,"type":15},"2026-07-12T08:21:34.637923",{"slug":899,"name":899,"fn":900,"description":901,"org":902,"tags":903,"stars":824,"repoUrl":825,"updatedAt":909},"binlog-generation","generate MSBuild binary logs for diagnostics","Generate MSBuild binary logs (binlogs) for build diagnostics and analysis. USE FOR: adding \u002Fbl:{} to any dotnet build, test, pack, publish, or restore command to capture a full build execution trace, prerequisite for binlog-failure-analysis and build-perf-diagnostics skills, enabling post-build investigation of errors or performance. Requires MSBuild 17.8+ \u002F .NET 8 SDK+ for {} placeholder; PowerShell needs -bl:{{}}. DO NOT USE FOR: non-MSBuild build systems (npm, Maven, CMake), analyzing an existing binlog (use binlog-failure-analysis instead).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[904,907,908],{"name":905,"slug":906,"type":15},"Build","build",{"name":821,"slug":822,"type":15},{"name":802,"slug":803,"type":15},"2026-07-19T05:38:19.340791",{"slug":911,"name":911,"fn":912,"description":913,"org":914,"tags":915,"stars":824,"repoUrl":825,"updatedAt":919},"build-parallelism","optimize MSBuild build parallelism","Diagnose and fix under-parallelized MSBuild builds. USE WHEN a multi-project solution build is slower than expected, doesn't speed up when you add cores, pegs a single core while others idle, or you want to know why `-m` isn't helping. Note: `\u002Fmaxcpucount` default is 1 (sequential) — always pass `-m` for parallel builds. Covers finding the critical path (longest serial ProjectReference chain), graph build (`\u002Fgraph`), BuildInParallel, and solution filters (`.slnf`). DO NOT USE FOR: single-project builds, incremental issues (use incremental-build), compilation slowness inside one project (use build-perf-diagnostics), non-MSBuild build systems.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[916,917,918],{"name":799,"slug":800,"type":15},{"name":802,"slug":803,"type":15},{"name":805,"slug":806,"type":15},"2026-07-19T05:38:18.364937",{"slug":921,"name":921,"fn":922,"description":923,"org":924,"tags":925,"stars":824,"repoUrl":825,"updatedAt":932},"build-perf-baseline","establish and optimize build performance baselines","Establish build performance baselines and apply systematic optimization techniques. USE FOR: diagnosing slow builds, establishing before\u002Fafter measurements (cold, warm, no-op scenarios), applying optimization strategies like MSBuild Server, static graph builds, artifacts output, and dependency graph trimming. Start here before diving into build-perf-diagnostics, incremental-build, or build-parallelism. DO NOT USE FOR: non-MSBuild build systems, detailed bottleneck analysis (use build-perf-diagnostics after baselining).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[926,927,930,931],{"name":802,"slug":803,"type":15},{"name":928,"slug":929,"type":15},"Monitoring","monitoring",{"name":805,"slug":806,"type":15},{"name":867,"slug":868,"type":15},"2026-07-12T08:21:35.865649",{"slug":934,"name":934,"fn":935,"description":936,"org":937,"tags":938,"stars":824,"repoUrl":825,"updatedAt":943},"build-perf-diagnostics","diagnose MSBuild build performance bottlenecks","Diagnose MSBuild build performance bottlenecks using binary log analysis. USE FOR: identifying why builds are slow by analyzing binlog performance summaries, detecting ResolveAssemblyReference (RAR) taking >5s, Roslyn analyzers consuming >30% of Csc time, single targets dominating >50% of build time, node utilization below 80%, excessive Copy tasks, NuGet restore running every build. Covers timeline analysis, Target\u002FTask Performance Summary interpretation, and 7 common bottleneck categories. Use after build-perf-baseline has established measurements. DO NOT USE FOR: establishing initial baselines (use build-perf-baseline first), fixing incremental build issues (use incremental-build), parallelism tuning (use build-parallelism), non-MSBuild build systems.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[939,940,941,942],{"name":799,"slug":800,"type":15},{"name":821,"slug":822,"type":15},{"name":802,"slug":803,"type":15},{"name":805,"slug":806,"type":15},"2026-07-12T08:21:40.961722",{"slug":945,"name":945,"fn":946,"description":947,"org":948,"tags":949,"stars":824,"repoUrl":825,"updatedAt":953},"check-bin-obj-clash","detect MSBuild output path conflicts","Detects MSBuild projects with conflicting OutputPath or IntermediateOutputPath. USE FOR: builds failing with 'Cannot create a file when that file already exists', 'The process cannot access the file because it is being used by another process', intermittent build failures that succeed on retry, or missing\u002Foverwritten outputs in multi-project or multi-targeting builds where bin\u002Fobj (or project.assets.json) collide. Common causes: shared OutputPath, missing AppendTargetFrameworkToOutputPath, extra global properties (e.g. PublishReadyToRun), or SetTargetFramework on a ProjectReference to a single-targeting project. DO NOT USE FOR: file access errors unrelated to MSBuild (OS-level locking), single-project single-TFM builds, non-MSBuild build systems.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[950,951,952],{"name":821,"slug":822,"type":15},{"name":802,"slug":803,"type":15},{"name":864,"slug":865,"type":15},"2026-07-19T05:38:14.336279",144,{"items":956,"total":1054},[957,973,986,998,1011,1027,1043],{"slug":958,"name":958,"fn":959,"description":960,"org":961,"tags":962,"stars":28,"repoUrl":29,"updatedAt":972},"android-slim-bindings","create Android slim bindings for .NET","Create Android slim bindings for MAUI\u002F.NET Android. USE FOR: slim Android binding, Kotlin\u002FJava wrappers, build.gradle.kts, Maven, AAR\u002FJAR, AndroidMavenLibrary, AndroidLibrary, @JvmStatic, XA4241\u002FXA4242, Xamarin.AndroidX\u002FKotlin NuGets. DO NOT USE FOR: iOS\u002FmacOS bindings, general MAUI apps, or NuGet packaging.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[963,964,965,968,971],{"name":799,"slug":800,"type":15},{"name":488,"slug":35,"type":15},{"name":966,"slug":967,"type":15},"Java","java",{"name":969,"slug":970,"type":15},"Kotlin","kotlin",{"name":26,"slug":27,"type":15},"2026-07-12T08:22:54.006105",{"slug":974,"name":974,"fn":975,"description":976,"org":977,"tags":978,"stars":28,"repoUrl":29,"updatedAt":985},"devflow-automation","automate .NET MAUI app state","Automate MAUI app state through DevFlow Actions. USE FOR: `[DevFlowAction]` shortcuts, login, seed data, deep screens. DO NOT USE FOR: arbitrary methods, DI internals, UI MCP tools, connectivity, or build\u002Fdeploy issues.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[979,980,983,984],{"name":799,"slug":800,"type":15},{"name":981,"slug":982,"type":15},"Automation","automation",{"name":23,"slug":24,"type":15},{"name":26,"slug":27,"type":15},"2026-07-12T08:22:56.616564",{"slug":987,"name":987,"fn":988,"description":989,"org":990,"tags":991,"stars":28,"repoUrl":29,"updatedAt":997},"devflow-connect","diagnose DevFlow agent connectivity issues","Diagnose DevFlow agent connectivity. USE FOR: `maui devflow` connection failures, agent not found, ports, adb forwarding, broker. DO NOT USE FOR: build failures, setup, visual tree, or Blazor CDP.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[992,993,994],{"name":821,"slug":822,"type":15},{"name":23,"slug":24,"type":15},{"name":995,"slug":996,"type":15},"Networking","networking","2026-07-12T08:22:48.847431",{"slug":999,"name":999,"fn":1000,"description":1001,"org":1002,"tags":1003,"stars":28,"repoUrl":29,"updatedAt":1010},"dotnet-workload-info","discover MAUI workload metadata","Discover MAUI workload metadata from live NuGet APIs. USE FOR: workload manifest lookup, WorkloadDependencies.json, v3-flatcontainer, CLI-to-NuGet version conversion, Xcode\u002FJDK\u002FAndroid SDK requirements, CI sdkmanager packages, `packageid:Microsoft.Maui.Controls`. DO NOT USE FOR: installing workloads, build debugging, or app version edits.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1004,1005,1008,1009],{"name":17,"slug":18,"type":15},{"name":1006,"slug":1007,"type":15},"CLI","cli",{"name":802,"slug":803,"type":15},{"name":23,"slug":24,"type":15},"2026-07-12T08:22:46.318953",{"slug":1012,"name":1012,"fn":1013,"description":1014,"org":1015,"tags":1016,"stars":28,"repoUrl":29,"updatedAt":1026},"ios-slim-bindings","create iOS slim bindings for MAUI","Create iOS slim bindings for MAUI. USE FOR: slim iOS binding, Native Library Interop, Swift\u002FObjective-C wrappers, XcodeGen project.yml, Podfile, CocoaPods static linking, BUILD_LIBRARY_FOR_DISTRIBUTION, XcodeProject MSBuild, `@objc`\u002F`[Export]` selector crashes, async completion handlers. DO NOT USE FOR: Android bindings, general MAUI apps, or NuGet packaging.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1017,1018,1019,1020,1023],{"name":799,"slug":800,"type":15},{"name":848,"slug":37,"type":15},{"name":23,"slug":24,"type":15},{"name":1021,"slug":1022,"type":15},"Swift","swift",{"name":1024,"slug":1025,"type":15},"Xcode","xcode","2026-07-12T08:22:50.128667",{"slug":1028,"name":1028,"fn":1029,"description":1030,"org":1031,"tags":1032,"stars":28,"repoUrl":29,"updatedAt":1042},"maui-accessibility","implement accessibility in .NET MAUI apps","Make .NET MAUI apps accessible with semantic properties, screen reader labels\u002Fhints, heading levels, focus, announcements, AutomationProperties, touch targets, and platform checks. USE FOR: accessibility audits, WCAG UI fixes, TalkBack\u002FVoiceOver\u002FNarrator behavior, SemanticProperties.Description\u002FHint\u002FHeadingLevel, SemanticScreenReader.Announce, SetSemanticFocus, avoiding redundant Label metadata, hiding decorative content with IsInAccessibleTree=false, and CollectionView row semantics. DO NOT USE FOR: general layout, UI automation only, or performance tuning.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1033,1034,1037,1038,1039],{"name":799,"slug":800,"type":15},{"name":1035,"slug":1036,"type":15},"Accessibility","accessibility",{"name":23,"slug":24,"type":15},{"name":26,"slug":27,"type":15},{"name":1040,"slug":1041,"type":15},"WCAG","wcag","2026-07-12T08:22:17.823583",{"slug":1044,"name":1044,"fn":1045,"description":1046,"org":1047,"tags":1048,"stars":28,"repoUrl":29,"updatedAt":1053},"maui-ai-debugging","debug .NET MAUI application issues","Legacy DevFlow debug skill. USE FOR: `maui-ai-debugging`, `maui devflow`, screenshots, visual tree, Blazor CDP, simulator\u002Femulator debugging. DO NOT USE FOR: setup, desktop automation, AppleScript, host `xdotool`.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1049,1050,1051,1052],{"name":799,"slug":800,"type":15},{"name":821,"slug":822,"type":15},{"name":23,"slug":24,"type":15},{"name":26,"slug":27,"type":15},"2026-07-12T08:22:52.634889",32]