omnibus-instrument-product-analytics

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes a client-side PostHog snippet that loads and executes remote JavaScript at runtime (p.src = api_host + "/static/array.js", e.g. https://us.i.posthog.com/static/array.js), so the skill depends on and runs external code fetched from that URL.