alibabacloud-mtr-network-diagnosis-customer

This module is best characterized as a security-sensitive remote administration tool: it sends base64-encoded Bash scripts to ECS RunCommand for execution, including an explicit arbitrary script runner (--script) and a diagnostic runner that interpolates user-controlled `target`/`tcp_port` directly into shell commands without escaping. While there is no clear evidence of covert malware (no credential theft, persistence, or hidden network exfiltration) in this fragment, the remote execution and injection surfaces make it potentially dangerous if CLI access or inputs are not tightly controlled. Treat as high-impact functionality requiring strict authorization, input validation/escaping, and audit controls.