SEO Audit Suite

• Analyzed: May 11, 2026, 4:38 AM
• Findings: 1
• Version: 1.0.0
• Hash: ce6657db2f6a65ade9e0677174729f31c1fd9e97dd54364637b5f822c87f6efa
• Source: palm
• External report: View on VirusTotal

Findings (1)

The SEO Audit Suite contains multiple shell injection vulnerabilities where shell variables are directly expanded into Python code strings within Bash scripts (e.g., scripts/analyze-competitor.sh, scripts/geo-audit.sh, and scripts/technical-audit.sh). This pattern allows for potential Remote Code Execution (RCE) if the agent is prompted to process a maliciously crafted URL or keyword. While the toolkit appears to be a functional and legitimate SEO/GEO auditing utility with no clear evidence of intentional malice or data exfiltration, these critical security flaws pose a significant risk to the environment where the agent operates.