Back to plugin

Security audit

Medusa Commerce

Security checks for vulnerabilities and agentic risk

Overview

The provided artifacts look like a coherent Medusa development guidance bundle, with disclosed documentation lookups and no evidence of hidden credential use, persistence, exfiltration, or destructive automation.

This appears safe to use as a Medusa v2 development helper. Expect it to consult live official docs and still review generated code, migrations, admin/API changes, and any omitted skill files before applying them to a real store or database.

Static analysis

No suspicious patterns detected.