blueprint

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Most links are official WordPress/GitHub playground resources (low risk), but several entries point to arbitrary external ZIPs or unspecified GitHub user repos (e.g. https://example.com/plugin.zip, the blueprint-url=https://example.com/bundle.zip fragment, and https://github.com/user/repo) which are untrusted download sources and could be used to deliver malware.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The blueprint system exposes high-risk, intentionally-abusable capabilities — arbitrary PHP execution (runPHP), filesystem write/activation of plugins and mu-plugins (writeFile/writeFiles + activatePlugin), arbitrary WP-CLI commands, outbound HTTP requests (request and url resources), and fetching remote/git resources — any of which can be used to install backdoors, execute remote code, steal credentials/environment data, or exfiltrate data if blueprints or referenced resources are untrusted.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The blueprint runtime explicitly supports fetching remote code/resources (e.g., resource "url" such as https://example.com/plugin.zip and "git:directory" such as https://github.com/user/repo or https://github.com/WordPress/gutenberg) which are fetched during execution to install/write plugins/themes and therefore can deliver and execute remote code in the playground.