scrapebox-ultimate-seo-automation
Fail
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: HIGHCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEDYNAMIC_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The setup instructions explicitly direct the user to 'Run the installer with administrator privileges', which grants the application full control over the system during installation.
- [PERSISTENCE]: The skill provides a PowerShell script to create a scheduled task using
Register-ScheduledTask. This task is configured to run as the 'SYSTEM' user withRunLevel Highest, establishing a high-privilege persistence mechanism that executes automatically daily. - [COMMAND_EXECUTION]: The skill heavily relies on executing external binaries (
ScrapeBox.exe) viasubprocess.runin Python and direct shell execution in PowerShell and Batch scripts. While intended for SEO automation, these patterns allow for arbitrary command execution on the host Windows environment. - [DYNAMIC_EXECUTION]: The Python scripts use
subprocess.runwith lists constructed from variables (cmd = [...]). While the current implementation uses these to call the specific SEO tool, the pattern represents a surface for dynamic code execution where user-supplied inputs (like keywords or URLs) are passed into shell commands.
Recommendations
- AI detected serious security threats
Audit Metadata