new-user

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to take a user-provided password and embed it verbatim into a shell command (npx medusa user -e <email> -p <password>), which requires the LLM to handle and output the secret directly, creating an exfiltration risk.