I don't see any reason why Google couldn't add to their javascript tracking code the ability to detect if a non-SSL script sits on an SSL page. They would then

I don't see any reason why Google couldn't add to their javascript tracking code the ability to detect if a non-SSL script sits on an SSL page. They would then flag it in the analytics control panel. Whoever is monitoring analytics could spot it right away rather than waiting for their consultant to point it out months later.