configurator-cli

No direct malware or malicious behavior is evident in the provided documentation. The principal security risk is executing an unpinned npm package via npx with privileged Saleor credentials and permitting authenticated deployment actions. Pin and verify the CLI version, enforce least-privilege secrets, and isolate deployment workflows from untrusted pull requests.