Can someone reverse-engineer the AutoSSL Agent and use it in their own product?
While someone could reverse-engineer the AutoSSL Agent, it would be pointless. The value of AutoSSL is not only in the AutoSSL Agent but also in the connection with an AutoSSL Server. A pirated AutoSSL Agent is worthless because an AutoSSL Server cannot authenticate it and therefore will not service it.