scrapebox-ultimate-seo-automation
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides Python and PowerShell scripts that execute the ScrapeBox CLI using
subprocess.runand direct shell calls. This is intended for automation of the desktop application. - [COMMAND_EXECUTION]: Provides instructions for creating scheduled tasks using
Register-ScheduledTaskwith high privileges to automate daily SEO reports. While this establishes persistence, it is a documented part of the automation workflow. - [DATA_EXFILTRATION]: Contains code snippets for sending scraped data to webhooks via the
requestslibrary, using environment variables for the endpoint URL. This follows best practices for secret management. - [PROMPT_INJECTION]: The skill is designed to harvest data from the open web (search engines and websites). This creates an attack surface for indirect prompt injection if the agent processes the harvested content without sanitization, which is a common risk factor for web scraping tools.
Audit Metadata