a0-create-plugin

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill describes installing community plugins from the Plugin Index/GitHub (e.g. https://github.com/agent0ai/a0-plugins), which the runtime uses to fetch plugin repositories whose code and hooks are executed by Agent Zero, so this external URL can deliver remote code that runs in the agent environment.