Security audit
Medusa Commerce
Security checks for vulnerabilities and agentic risk
Overview
The provided artifacts look like a coherent Medusa development guidance bundle, with disclosed documentation lookups and no evidence of hidden credential use, persistence, exfiltration, or destructive automation.
This appears safe to use as a Medusa v2 development helper. Expect it to consult live official docs and still review generated code, migrations, admin/API changes, and any omitted skill files before applying them to a real store or database.
Static analysis
No suspicious patterns detected.
