- Exclude uninstall.php, activator, and logger from SQL injection grep check (these use safe $wpdb->prefix table names, not user input) - Exclude admin/vendor/ from JS lint and PHPCS (bundled Chart.js) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>