hydrogen-analytics-tracking

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly loads third‑party scripts at runtime that execute remote code and are required for functionality — e.g. https://www.googletagmanager.com/gtm.js (and related GTM URLs) and https://cdn.shopify.com/storefront/web-components.js which are fetched and executed in-page and control runtime behavior.