migration-companion

This code searches ~/.contentfulrc.json and ~/.config/contentful/config.json for Contentful management-token fields and prints a found token to stdout unless --check is supplied. Plaintext credential disclosure is a significant security concern if invoked unexpectedly or if stdout is captured, although this fragment shows no network exfiltration or other malicious action. Severity is medium to high depending on execution context.