ping-orchestration-reactjs-journey-sdk

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime loading of third‑party reCAPTCHA scripts (e.g., https://www.google.com/recaptcha/api.js?render=explicit and https://www.google.com/recaptcha/enterprise.js — or a server-supplied captchaApiUri) which are fetched and executed in the browser to implement ReCaptcha callbacks, so they run remote code at skill runtime.