Skip to main content

maui-aspire

Guides .NET MAUI apps in consuming .NET Aspire backend services, covering configuration, authentication, and development workflows.

Install this skill

or
58/100

Security score

The maui-aspire skill was audited on Mar 1, 2026 and we found 20 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 158

Curl to non-GitHub URL

SourceSKILL.md
158curl -LO https://aka.ms/msidweb/aspire/entra-id-provisioning-skill
medium line 165

Curl to non-GitHub URL

SourceSKILL.md
165curl -LO https://aka.ms/msidweb/aspire/entra-id-code-skill
high line 307

Access to system keychain/keyring

SourceSKILL.md
307For HTTPS with dev certificates, the simulator trusts the macOS keychain.
low line 26

External URL reference

SourceSKILL.md
26- MAUI cannot use Aspire service discovery URIs (`https+http://apiservice`)
low line 69

External URL reference

SourceSKILL.md
69MAUI cannot use `https+http://apiservice` — it needs real HTTP(S) URLs.
low line 83

External URL reference

SourceSKILL.md
83? "https://10.0.2.2:7001" // Android emulator → host loopback
low line 84

External URL reference

SourceSKILL.md
84: "https://localhost:7001" // iOS sim, Mac Catalyst, Windows
low line 86

External URL reference

SourceSKILL.md
86"https://myapi.azurecontainerapps.io"
low line 95

External URL reference

SourceSKILL.md
952. Open the Aspire dashboard (default: `https://localhost:17178`)
low line 106

External URL reference

SourceSKILL.md
106<ApiBaseUrl>https://localhost:7001</ApiBaseUrl>
low line 109

External URL reference

SourceSKILL.md
109<ApiBaseUrl>https://myapi.azurecontainerapps.io</ApiBaseUrl>
low line 158

External URL reference

SourceSKILL.md
158curl -LO https://aka.ms/msidweb/aspire/entra-id-provisioning-skill
low line 165

External URL reference

SourceSKILL.md
165curl -LO https://aka.ms/msidweb/aspire/entra-id-code-skill
low line 228

External URL reference

SourceSKILL.md
228The Aspire dashboard opens at `https://localhost:17178`
low line 230

External URL reference

SourceSKILL.md
2302. **Note the API endpoint** from the dashboard (e.g., `https://localhost:7001`)
low line 262

External URL reference

SourceSKILL.md
262client.BaseAddress = new Uri("https://10.0.2.2:7001");
low line 295

External URL reference

SourceSKILL.md
295client.BaseAddress = new Uri("https://10.0.2.2:7001");
low line 356

External URL reference

SourceSKILL.md
356public static string BaseUrl => "https://myapi.azurecontainerapps.io";
low line 374

External URL reference

SourceSKILL.md
3744. **Don't use `https+http://` URIs in MAUI.** These are Aspire service
low line 392

External URL reference

SourceSKILL.md
392- **Aspire docs**: https://learn.microsoft.com/dotnet/aspire
Scanned on Mar 1, 2026
View Security Dashboard