Logic error in medusa init

[exrienz]

Install 1 missing tools but it install all tools instead. Logic error?

[rosschurchill]

Hi @exrienz — great catch, thanks for reporting this!

You're absolutely right. When you confirmed the install prompt, the code was calling medusa install --all regardless of which specific tool was missing — so it would attempt to install everything instead of just the one tool you needed.

Fixed just now. The logic now correctly:

• AI security tools (modelscan, garak, llm-guard) — offered for auto-install if missing
• External linters (bandit, eslint, etc.) — shown with a note to install via your package manager (pip/npm/apt/brew), since MEDUSA doesn't manage those directly

Apologies for the slow reply — this slipped through our queue. Fix will be in the next patch release.

[rosschurchill]

Quick follow-up — the fix shipped in v2026.5.1 and the latest release is now v2026.5.2.

pip install --upgrade medusa-security

Thanks again for taking the time to report this — it kicked off a broader audit that caught several other issues we have since fixed. Really appreciate it!