spawn/aws
A d8785c3d0b
security: fix command injection in cline auth via remote env var expansion (#1473)
All 9 cline.sh scripts embedded OPENROUTER_API_KEY directly into the
cloud_run command string, allowing shell metacharacter injection on the
remote server. Fix by escaping the dollar sign (\${OPENROUTER_API_KEY})
so the variable is expanded on the remote machine where it's already
set via agent_env_vars()/generate_env_config, not locally before being
passed to cloud_run.

Agent: security-auditor

Co-authored-by: B <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-02-19 12:25:16 -05:00
..
lib fix: use json_escape in save_vm_connection to prevent malformed JSON (#1470) 2026-02-19 16:23:27 +00:00
aider.sh fix: prevent SSH hangs, fix command escaping, pin Python 3.12 for aider (#1439) 2026-02-18 04:23:15 -05:00
amazonq.sh fix: harden agent reliability + security across all clouds (#1468) 2026-02-19 08:36:24 -05:00
claude.sh feat: prioritize clouds with CLI installed + hcloud CLI integration (#1375) 2026-02-16 20:12:35 -08:00
cline.sh security: fix command injection in cline auth via remote env var expansion (#1473) 2026-02-19 12:25:16 -05:00
codex.sh feat: prioritize clouds with CLI installed + hcloud CLI integration (#1375) 2026-02-16 20:12:35 -08:00
continue.sh feat: prioritize clouds with CLI installed + hcloud CLI integration (#1375) 2026-02-16 20:12:35 -08:00
gemini.sh fix: install_agent double-escaping + github-auth reliability (#1460) 2026-02-19 05:21:55 -05:00
goose.sh feat: prioritize clouds with CLI installed + hcloud CLI integration (#1375) 2026-02-16 20:12:35 -08:00
gptme.sh fix: use uv --upgrade to ensure Python 3.13-compatible Pillow across all clouds (#1436) 2026-02-18 03:21:59 -05:00
interpreter.sh fix: harden agent reliability + security across all clouds (#1468) 2026-02-19 08:36:24 -05:00
kilocode.sh feat: prioritize clouds with CLI installed + hcloud CLI integration (#1375) 2026-02-16 20:12:35 -08:00
nanoclaw.sh fix: harden agent reliability + security across all clouds (#1468) 2026-02-19 08:36:24 -05:00
openclaw.sh fix: harden agent reliability + security across all clouds (#1468) 2026-02-19 08:36:24 -05:00
opencode.sh feat: prioritize clouds with CLI installed + hcloud CLI integration (#1375) 2026-02-16 20:12:35 -08:00
plandex.sh feat: prioritize clouds with CLI installed + hcloud CLI integration (#1375) 2026-02-16 20:12:35 -08:00
README.md feat: prioritize clouds with CLI installed + hcloud CLI integration (#1375) 2026-02-16 20:12:35 -08:00

AWS Lightsail

AWS Lightsail instances via AWS CLI. AWS Lightsail

Uses 'ubuntu' user instead of 'root'. Requires AWS CLI installed and configured.

Agents

Claude Code

bash <(curl -fsSL https://openrouter.ai/labs/spawn/aws/claude.sh)

OpenClaw

bash <(curl -fsSL https://openrouter.ai/labs/spawn/aws/openclaw.sh)

NanoClaw

bash <(curl -fsSL https://openrouter.ai/labs/spawn/aws/nanoclaw.sh)

Aider

bash <(curl -fsSL https://openrouter.ai/labs/spawn/aws/aider.sh)

Goose

bash <(curl -fsSL https://openrouter.ai/labs/spawn/aws/goose.sh)

Codex CLI

bash <(curl -fsSL https://openrouter.ai/labs/spawn/aws/codex.sh)

Open Interpreter

bash <(curl -fsSL https://openrouter.ai/labs/spawn/aws/interpreter.sh)

Gemini CLI

bash <(curl -fsSL https://openrouter.ai/labs/spawn/aws/gemini.sh)

Amazon Q CLI

bash <(curl -fsSL https://openrouter.ai/labs/spawn/aws/amazonq.sh)

Cline

bash <(curl -fsSL https://openrouter.ai/labs/spawn/aws/cline.sh)

gptme

bash <(curl -fsSL https://openrouter.ai/labs/spawn/aws/gptme.sh)

OpenCode

bash <(curl -fsSL https://openrouter.ai/labs/spawn/aws/opencode.sh)

Plandex

bash <(curl -fsSL https://openrouter.ai/labs/spawn/aws/plandex.sh)

Non-Interactive Mode

LIGHTSAIL_SERVER_NAME=dev-mk1 \
OPENROUTER_API_KEY=sk-or-v1-xxxxx \
  bash <(curl -fsSL https://openrouter.ai/labs/spawn/aws/claude.sh)