build-windows-exe

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes PowerShell commands and the .NET CLI (dotnet) to perform build and packaging operations.
  • Evidence: It executes dotnet clean, dotnet build, and dotnet publish to compile the application and its plugins.
  • Evidence: It uses Stop-Process to terminate dotnet, MSBuild, and VBCSCompiler processes to resolve file access conflicts during the build.
  • Evidence: It invokes the Inno Setup Compiler (ISCC.exe) to create final installer executables.
  • [EXTERNAL_DOWNLOADS]: The skill incorporates external content via git submodule management.
  • Evidence: The command git submodule update --remote --merge ShareX.ImageEditor is used to synchronize project components from the repository's configured submodules.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes local configuration files and interpolates their contents into shell command arguments.
  • Ingestion points: The skill reads plugin.json to extract pluginId and parses Directory.Build.props (XML) to extract the application Version string.
  • Boundary markers: No explicit boundary markers or delimiters are used for the extracted variables.
  • Capability inventory: The extracted values are used to define output directory paths in dotnet publish and as command-line definitions for the Inno Setup compiler (ISCC.exe).
  • Sanitization: The skill does not perform explicit validation or sanitization on these extracted strings before they are used in shell commands.
  • [SAFE]: The activities described are consistent with standard Windows build automation practices. The skill relies on local scripts and well-known development tools within the repository context, and no malicious patterns or unauthorized operations were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 09:09 AM