wordpress-plugin-core

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime update logic that fetches and executes remote plugin code (examples use the Plugin Update Checker library and update endpoints such as https://github.com/YahnisElsts/plugin-update-checker and runtime update URLs like https://github.com/yourusername/your-plugin/ and https://example.com/updates/my-plugin.json), so these URLs are used at runtime to download/execute remote code and the examples rely on that external updater library.