The skeleton is not current best practice, it's just a random example.

You should not leak USER from the environment into the init script anyway, so using USER here is perfectly fine.