scrapebox-seo-automation
Fail
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PRIVILEGE_ESCALATION]: The instructions direct the agent to run the primary executable (
ScrapeBox.exe) with administrative privileges to ensure proper functionality and file permissions.\n- [PERSISTENCE]: The skill provides detailed guidance for creating scheduled tasks using the Windows Task Scheduler to execute batch scripts (rank_check.bat) at regular intervals.\n- [INDIRECT_PROMPT_INJECTION]: The tool's primary function is to harvest and process data from search engine results and external keyword files, which presents a significant surface for ingesting untrusted content.\n - Ingestion points: Search engine harvesting results (URLs, snippets) and keyword/footprint files (keywords.txt).\n
- Boundary markers: There are no instructions for using delimiters or boundary markers when the agent processes harvested data.\n
- Capability inventory: The skill involves executing batch scripts, performing extensive network operations, and writing results to the local file system.\n
- Sanitization: No sanitization or validation steps are described for the external content retrieved by the harvester.\n- [COMMAND_EXECUTION]: The documentation includes batch script templates and command-line arguments (
/autorun,/check_urls,/test_proxies) for automating the tool's behavior via the shell.\n- [EXTERNAL_DOWNLOADS]: The setup instructions direct the user to download installation packages from repository releases, though no specific URL is provided in the instruction set.
Recommendations
- AI detected serious security threats
Audit Metadata