dprint-plugin-creator

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly references runtime asset URLs (e.g. https://plugins.dprint.dev//-.wasm and GitHub release URLs such as https://github.com//dprint-plugin-/releases/download//dprint-plugin--x86_64-pc-windows-msvc.zip and https://github.com/kjanat/dprint-plugin-svgo/releases/download/0.4.1/plugin.json) that the dprint tooling/proxy fetches at runtime to download Wasm/native plugin artifacts or manifests which are then executed or drive what code is executed.