When I import a weak aura from wago-io it often gives the warning “This import contains custom LUA code, be sure you trust who you received it from.”
Generally what is it that we risk? Can custom LUA code steal items? delete items? spend gold? steal our payment info?
Or is it not really a big deal?
There was a time when code could screw up your guild roster or mail stuff (like gold) to another player. Most of that’s been removed, but WA can run arbitrary Lua code and you should use with care. WAGO has a way of looking at the aura as code and even a layman can pretty much just read through it and make sure there’s nothing too horrible leaping out at them.