build-windows-exe
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes powerful PowerShell commands to manage the build environment, including
Stop-Processto terminate existing instances of the application and Roslyn compiler servers (VBCSCompiler), andRemove-Itemto delete build directories. These operations are standard for a build automation specialist to ensure a clean compilation state.\n- [DATA_EXPOSURE]: The skill reads local project files such asplugin.jsonandDirectory.Build.propsto extract versioning and plugin identity metadata. This information is used to define output paths and installer names.\n- [INDIRECT_PROMPT_INJECTION]: \n - Ingestion points: Reads the
pluginIdvalue fromplugin.jsonfiles within thesrc/desktop/pluginsdirectory (SKILL.md).\n - Boundary markers: None; values are read directly into PowerShell variables without delimiters or validation warnings.\n
- Capability inventory: The skill performs file system creation (
New-Item) and executesdotnet publishwith dynamic paths (SKILL.md).\n - Sanitization: There is no sanitization or path validation performed on the
pluginIdbefore it is used to construct the directory structure for published plugins, which represents a theoretical surface for path manipulation.
Audit Metadata