diff --git a/apps/frontend/scripts/download-prebuilds.cjs b/apps/frontend/scripts/download-prebuilds.cjs
index 40d50b3f..072afcd7 100644
--- a/apps/frontend/scripts/download-prebuilds.cjs
+++ b/apps/frontend/scripts/download-prebuilds.cjs
@@ -134,10 +134,18 @@ function downloadFile(url, destPath) {
  * Extract zip file (using built-in tools)
  */
 function extractZip(zipPath, destDir) {
-  const { execSync } = require('child_process');
+  const { execFileSync } = require('child_process');
 
-  // Use PowerShell on Windows
-  execSync(`powershell -Command "Expand-Archive -Path '${zipPath}' -DestinationPath '${destDir}' -Force"`, {
+  // Use PowerShell on Windows without going through a shell
+  execFileSync('powershell', [
+    '-NoProfile',
+    '-NonInteractive',
+    '-Command',
+    'Expand-Archive',
+    '-Path', zipPath,
+    '-DestinationPath', destDir,
+    '-Force',
+  ], {
     stdio: 'inherit',
   });
 }