Is there a way to create an actionscript or task to prompt user for a password and this will be masked, as well as on the debug log messages?
By “user”, do you mean the operator on the BigFix Console, or the logged-on user on the endpoint?
the operator on the bigfix console.
The discussion thread and example Fixlet linked at Secure Parameters may be helpful.
With a Secure Parameter Fixlet, you have to create the Description field in HTML/JavaScript, and take the user input in a Password-type input field. The Console editor doesn’t provide for this, unfortunately, so you have to do a portion of the editing in a text editor and then import it to the console.