pp-google-analytics

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill requires installing and executing remote code at runtime via the installer commands (e.g., "npx -y @mvanhorn/printing-press-library install google-analytics --cli-only --bin-dir ~/.local/bin" and "go install github.com/mvanhorn/printing-press-library/library/marketing/google-analytics/cmd/google-analytics-pp-cli@latest"), which fetches and runs external code from the npm package and the GitHub repo; therefore these external endpoints are runtime dependencies that can execute code.