Automic VaultAutomic Vault

security

Cloud CLI packages

Cloud CLIs often hold access to accounts, deploys, registries, state, and production infrastructure from a local shell.

summary

Why this package group is here

Cloud CLI packages currently includes 724 package catalog entries. 0 have protected-tool coverage, 2 have approval-gate metadata, and 288 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.

Generated source

This hub uses the same local package data as individual package pages: Nucleus package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.

Review model

Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.

High-signal tools

awscli8 approval-gate rules are present.docker6 approval-gate rules are present.apache-sparkbroad file, network, media, or database tool signalaws-shellgeneralized runtime or code generation signalcrungeneralized runtime or code generation signaldocker-agentgeneralized runtime or code generation signalgimmegeneralized runtime or code generation signalgitlab-ci-localgeneralized runtime or code generation signallitanigeneralized runtime or code generation signalshellzgeneralized runtime or code generation signalactnarrow executable package without higher-risk signalsactions-batchnarrow executable package without higher-risk signals

Approval-gated tools

awscli8 approval-gate rules are present.docker6 approval-gate rules are present.

Related hubs

Terminal utility packagesCommand-line utilities with local package pages, executable metadata, and Automic Vault security notes.593Homebrew utility packagesHomebrew packages with local package pages that need at least one crawlable package-graph path.587Networking and protocol packagesNetwork clients, protocol utilities, download tools, and remote-service helpers.339Source-control packagesSource-control packages can read or mutate repositories, issue trackers, release flows, and authenticated developer state.308Secret-risk packagesPackages with protected-tool coverage, approval-gate metadata, or non-low Geiger findings deserve explicit review before agents run them.293Web development packagesWeb servers, frontend build tools, JavaScript packages, CSS tools, and browser-adjacent utilities.235Developer build packagesBuild systems, compilers, generators, and developer tools that influence local source trees and artifacts.201Text processing packagesPackages used to inspect, transform, search, render, or generate text and structured documents.199

Representative package spokes

is-dockerCheck if the process is running inside a Docker containerplaywright-coreA high-level API to automate web browsersplaywrightA high-level API to automate web browsersis-inside-containerCheck if the process is running inside a container (Docker/Podman)cross-envRun scripts that set and use environment variables across platformsminiflareFun, full-featured, fully-local simulator for Cloudflare Workersworkerd👷 workerd, Cloudflare's JavaScript/Wasm RuntimewranglerCommand-line interface for all things Cloudflare WorkerskatexFast math typesetting for the web.webpack-cliCLI for webpack & friendsbunyana JSON logging library for node.js servicesaws-cdkAWS CDK CLI, the command line tool for CDK appspm2Production process manager for Node.JS applications with a built-in load balancer.kinesis-localA Mock API for AWS KinesisopenclawMulti-channel AI gateway with extensible messaging integrationsuntunTunnel your local HTTP(s) server to the world! Powered by Cloudflare Quick Tunnels.

packages

Indexed package pages

PackageManagerSignalsWhy it appears here
awscliHomebrewapproval gate, v2.35.178 approval-gate rules are present.
dockerHomebrewapproval gate, orange risk, v29.6.16 approval-gate rules are present.
apache-sparkHomebrewyellow risk, v4.1.2broad file, network, media, or database tool signal
aws-shellHomebrewyellow risk, v0.2.2generalized runtime or code generation signal
crunHomebrewyellow risk, v1.28generalized runtime or code generation signal
docker-agentHomebrewyellow risk, v1.101.0generalized runtime or code generation signal
gimmeHomebrewyellow risk, v1.5.6generalized runtime or code generation signal
gitlab-ci-localHomebrewyellow risk, v4.73.0generalized runtime or code generation signal
litaniHomebrewyellow risk, v1.29.0generalized runtime or code generation signal
shellzHomebrewyellow risk, v1.6.0generalized runtime or code generation signal
actHomebrewgreen risk, v0.2.89narrow executable package without higher-risk signals
actions-batchHomebrewgreen risk, v0.0.3narrow executable package without higher-risk signals
aiven-clientHomebrewv4.15.0no executable entrypoint in the package index
akamaiHomebrewgreen risk, v2.0.4narrow executable package without higher-risk signals
ansibleHomebrewv14.1.0no executable entrypoint in the package index
ansible-cmdbHomebrewgreen risk, v1.31narrow executable package without higher-risk signals
ansible-creatorHomebrewgreen risk, v26.6.1narrow executable package without higher-risk signals
ansible-lintHomebrewv26.6.0no executable entrypoint in the package index
apache-brooklyn-cliHomebrewgreen risk, v1.1.0narrow executable package without higher-risk signals
apkoHomebrewv1.2.23no executable entrypoint in the package index
argocd-autopilotHomebrewgreen risk, v0.4.20narrow executable package without higher-risk signals
argocd-vault-pluginHomebrewgreen risk, v1.18.1narrow executable package without higher-risk signals
athenacliHomebrewv1.7.0no executable entrypoint in the package index
atlantisHomebrewgreen risk, v0.46.0narrow executable package without higher-risk signals
autorestHomebrewgreen risk, v3.8.0narrow executable package without higher-risk signals
aws-amplifyHomebrewv14.5.1no executable entrypoint in the package index
aws-consoleHomebrewgreen risk, v1.24.4narrow executable package without higher-risk signals
aws-elasticbeanstalkHomebrewv3.27.3no executable entrypoint in the package index
aws-google-authHomebrewv0.0.38no executable entrypoint in the package index
aws-keychainHomebrewgreen risk, v3.0.0narrow executable package without higher-risk signals
aws-lcHomebrewv5.1.0no executable entrypoint in the package index
aws-nukeHomebrewv3.65.0no executable entrypoint in the package index
aws-rotate-keyHomebrewgreen risk, v1.2.0narrow executable package without higher-risk signals
aws-sam-cliHomebrewv1.163.0no executable entrypoint in the package index
aws-spiffe-workload-helperHomebrewgreen risk, v0.0.5narrow executable package without higher-risk signals
aws-sso-cliHomebrewv2.3.1no executable entrypoint in the package index
aws-sso-utilHomebrewv4.33.0no executable entrypoint in the package index
aws2-wrapHomebrewgreen risk, v1.4.0narrow executable package without higher-risk signals
awscli-localHomebrewv0.22.2no executable entrypoint in the package index
awscurlHomebrewv0.44no executable entrypoint in the package index
awsumeHomebrewv4.5.5no executable entrypoint in the package index
awsweeperHomebrewgreen risk, v0.12.0narrow executable package without higher-risk signals
azcopyHomebrewv10.32.5no executable entrypoint in the package index
azionHomebrewgreen risk, v4.22.2narrow executable package without higher-risk signals
azqrHomebrewgreen risk, v3.1.3narrow executable package without higher-risk signals
aztfexportHomebrewgreen risk, v0.19.0narrow executable package without higher-risk signals
azure-devHomebrewv1.27.0no executable entrypoint in the package index
azurehoundHomebrewgreen risk, v2.12.2narrow executable package without higher-risk signals
backplane-cliHomebrewv0.11.0no executable entrypoint in the package index
bastiHomebrewv1.8.0no executable entrypoint in the package index
bigquery-emulatorHomebrewv0.8.1no executable entrypoint in the package index
bomHomebrewgreen risk, v0.7.1narrow executable package without higher-risk signals
boringtunHomebrewgreen risk, v0.7.1narrow executable package without higher-risk signals
brigade-cliHomebrewgreen risk, v2.6.0narrow executable package without higher-risk signals
bubblewrapHomebrewgreen risk, v0.11.2narrow executable package without higher-risk signals
buildkitHomebrewv0.31.1no executable entrypoint in the package index
calicoctlHomebrewgreen risk, v3.32.1narrow executable package without higher-risk signals
cargo-chefHomebrewgreen risk, v0.1.77narrow executable package without higher-risk signals
cdk8sHomebrewv2.207.37no executable entrypoint in the package index
cfvHomebrewgreen risk, v3.2.0narrow executable package without higher-risk signals
chamberHomebrewgreen risk, v3.1.5narrow executable package without higher-risk signals
chart-releaserHomebrewgreen risk, v1.8.1narrow executable package without higher-risk signals
chart-testingHomebrewgreen risk, v3.14.0narrow executable package without higher-risk signals
cli53Homebrewgreen risk, v0.9.0narrow executable package without higher-risk signals
cmctlHomebrewgreen risk, v2.5.0narrow executable package without higher-risk signals
cntbHomebrewgreen risk, v1.6narrow executable package without higher-risk signals
consul-templateHomebrewgreen risk, v0.42.0narrow executable package without higher-risk signals
convoxHomebrewv3.24.11no executable entrypoint in the package index
cozyhrHomebrewgreen risk, v1.6.1narrow executable package without higher-risk signals
craneHomebrewv0.21.7no executable entrypoint in the package index
crossplaneHomebrewgreen risk, v2.4.0narrow executable package without higher-risk signals
daggerHomebrewgreen risk, v0.21.7narrow executable package without higher-risk signals