stata-c-plugins

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes explicit runtime install/build fetches that retrieve and execute remote code (download stplugin files from https://www.stata.com/plugins/ and use Stata's net install from "https://raw.githubusercontent.com/user/repo/main"), which are required for building/installing the plugins and thus present a high-risk external dependency.