How to create a compliance standard rule to check the software version on a windows host

I am looking to create a compliance standard rule that would run on all windows hosts to validate the cygwin open ssl version is compliant.

Is this possible? This is the command that we would like to run and capture the output - and score based on the version:

D:\Cygwin\bin>openssl version
OpenSSL 3.0.19 27 Jan 2026 (Library: OpenSSL 3.0.19 27 Jan 2026)

As cygwin is not registered and picked up by the default OEM host configuration gathering, as it is not registered under the add/remove programs inventory. We would therefore need to figure out how to manually capture this metric.

At present for the agent side rules, I don't see an option to run an OS command.