instrument-integration

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill includes a client-side PostHog snippet that at runtime loads and executes remote JavaScript from the configured api_host (e.g., https://us.i.posthog.com/static/array.js), which fetches and runs remote code the integration depends on.