aws-cli-beast
Warn
Audited by Socket on May 15, 2026
1 alert found:
AnomalyAnomalyreferences/automation-patterns.md
LOWAnomalyLOW
references/automation-patterns.md
No clear indicators of intentional supply-chain malware are present (no backdoor/persistence, no explicit credential theft, and no external exfiltration endpoints). The primary security concern is a high-risk dynamic execution pattern: `retry_aws()` uses `eval "$cmd"`, which can enable arbitrary command execution if `cmd` is influenced by untrusted input. Additional risk comes from batch/parallel AWS command execution using file-derived targets and several high-impact AWS state-changing operations, which increase blast radius if inputs or IAM permissions are not tightly controlled.
Confidence: 67%Severity: 65%
Audit Metadata