build-windows-exe
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes PowerShell commands and the .NET CLI (
dotnet) to perform build and packaging operations. - Evidence: It executes
dotnet clean,dotnet build, anddotnet publishto compile the application and its plugins. - Evidence: It uses
Stop-Processto terminatedotnet,MSBuild, andVBCSCompilerprocesses to resolve file access conflicts during the build. - Evidence: It invokes the Inno Setup Compiler (
ISCC.exe) to create final installer executables. - [EXTERNAL_DOWNLOADS]: The skill incorporates external content via git submodule management.
- Evidence: The command
git submodule update --remote --merge ShareX.ImageEditoris used to synchronize project components from the repository's configured submodules. - [INDIRECT_PROMPT_INJECTION]: The skill processes local configuration files and interpolates their contents into shell command arguments.
- Ingestion points: The skill reads
plugin.jsonto extractpluginIdand parsesDirectory.Build.props(XML) to extract the applicationVersionstring. - Boundary markers: No explicit boundary markers or delimiters are used for the extracted variables.
- Capability inventory: The extracted values are used to define output directory paths in
dotnet publishand as command-line definitions for the Inno Setup compiler (ISCC.exe). - Sanitization: The skill does not perform explicit validation or sanitization on these extracted strings before they are used in shell commands.
- [SAFE]: The activities described are consistent with standard Windows build automation practices. The skill relies on local scripts and well-known development tools within the repository context, and no malicious patterns or unauthorized operations were detected.
Audit Metadata