alibabacloud-workbench-cli
Agent-native CLI for managing ECS instances without public IPs, primarily for single-instance operations. It supports millisecond-level remote command execution, large file transfers up to 1GB, and TCP port forwarding. It offers four authentication modes: AK, RamRoleArn, CredentialsCmd, and CredentialsURI. Use it to run commands, deploy code, view logs, check processes, transfer files, set up port forwarding, or query and filter ECS instance lists.
- Created
- 6 months ago
- Last commit
- 12 hours ago
Security Findings
Remote code execution pipe2×
SuspiciousAnalyzerDownloads and pipes to shell: irm https://workbench-cli.oss-cn-hangzhou.aliyuncs.com/install.ps1 | iex
Downloads and pipes to shell: curl -fsSL https://workbench-cli.oss-cn-hangzhou.aliyuncs.com/install.sh | bash
Obfuscated execution
MaliciousAnalyzerWindows LOLBin / encoded shell: irm https://workbench-cli.oss-cn-hangzhou.aliyuncs.com/install.ps1 | iex
No license file
SuspiciousLineageNo license file at the repo root and GitHub's licenseInfo is empty — code's legal status is unclear
Flagged by the hosting marketplace
SuspiciousLineagethe skills.sh security audit flagged this skill (status=fail, risk=critical) — flagged by Socket,Snyk
Versions
1- Scanned Sep 20, 2026, 06:10 AMHigh