A WordPress checksum command can exit 0 while leaving one plugin unverified. In the reproduced lab, wp plugin verify-checksums --all --strict reported “2 of 3 plugins (1 skipped)” because a local plugin had no WordPress.org checksum, yet the shell still saw success. Later, a trusted core reinstall ...