ms-cpp
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of
vswhere.exeandMSBuild.exeto automate C++ builds.vswhereis a well-known Microsoft utility used to locate Visual Studio installations, andMSBuildis the standard build engine. The instructions provide a safe pattern for invoking these tools within a build environment. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process C++ source files (.cpp, .h, etc.), which creates an ingestion surface for untrusted data. A malicious file could attempt to embed instructions within comments or code. However, the skill provides specific style enforcement rules (modern syntax, contracts, RAII) and uses standard build tools, which limits the impact of such attempts. No automated execution of file content is described.
- [SAFE]: The skill promotes secure coding practices such as using RAII for resource management, avoiding raw pointers, and utilizing modern C++ safety features like
std::spanandstd::expectedto handle fallible operations without exceptions in hot paths.
Audit Metadata