aliyun-ecs-manage

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/run_remote_command.py

The fragment is a readable administrative automation tool for executing explicitly supplied commands on Alibaba Cloud ECS instances. It handles cloud credentials and remote command output but does not contain apparent hidden malicious behavior or obfuscation. Its security impact is high if exposed to untrusted users or run with overprivileged credentials, since it provides arbitrary remote command execution and can overwrite a caller-selected local file. Use only with tightly controlled access, least-privilege credentials, and validated output paths.

Confidence: 98%Severity: 72%
Audit Metadata
Analyzed At
Sep 22, 2026, 03:43 AM
Package URL
pkg:socket/skills-sh/cinience%2Falicloud-skills%2Faliyun-ecs-manage%2F@33c6d51faaecdabd255760426c8082996eba3e7c574f4b44ee429222a6c14b2d