registry / Telemetry / @seoagent-official/seoagent

@seoagent-official/seoagent

The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.

This report shows the evidence for @seoagent-official/seoagent@1.135.0. 0 of 130 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

The CLI's agent execution and local Claude credential checks fit its stated purpose. However, an unauthenticated sync can send the project's identifying domain to the vendor's telemetry endpoint, which warrants a warning under the telemetry rules.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

An unauthenticated sync when the project has a configured domain, unless telemetry is opted out.

Impact

The service learns which project domain ran sync without credentials; the source provides an opt-out and says the ping contains no paths or secrets.

Mechanism

The CLI posts a sync_unauthenticated event with a random install ID, CLI version, and project domain to its service telemetry endpoint.

AI rationale

Evidence

index.js.seoagent/project.md

Network endpoints1

seoagent.com/api/cli/telemetry

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The manifest exposes index.js as the SEOAgent CLI and declares the Claude Agent SDK as a runtime dependency; no lifecycle scripts are declared.
The unauthenticated-sync telemetry path attaches the project domain unless telemetry is opted out.
The event is POSTed to the service's /api/cli/telemetry endpoint.
The source describes the ping as including a random ID, CLI version, and project domain, and provides an SEOAGENT_TELEMETRY=0 opt-out.
The no-auth sync path invokes this event and reports when it was sent.

Evidence against

The package is an AI SEO CLI; invoking the Claude Agent SDK for requested SEO tasks matches its stated purpose.
The source describes the domain-bearing ping as containing no paths or secrets, and implements a telemetry opt-out.

Behavioral surface

Source

ChildProcessEnvironmentVarsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Source & flagged code

6 flagged

index.jsView file

9.sync-cursor L10: `,Fg=process.env.XDG_CONFIG_HOME&&process.env.XDG_CONFIG_HOME.trim().length>0?process.env.XDG_CONFIG_HOME:Wt(jg(),".config"),re=Wt(Fg,"seoagent"),it=Wt(re,"auth.json"),wi=Wt(re,"st... L11: `),i=Yg(r),s=i.length>0?i[0].indent:0,[a]=ll(i,0,s);return{data:a,body:o}}function st(e){if(!Kg(e))return null;try{return oe(qg(e,"utf-8"))}catch{return null}}function zg(e){if(e==... ... L15: `)?"":` L16: `)}import{existsSync as Ir,readdirSync as Jg,statSync as Xg}from"fs";import{join as at}from"path";var _i=["svelte.config.js","svelte.config.ts","svelte.config.mjs","svelte.config.c... L17: `).map(t=>t.trim()).filter(Boolean):[]}function Fr(e,t,n={}){let r=n.execGit??sh,o=n.sourceExists??((m,w)=>rh(oh(m,w))),i=n.checkedCommit&&jr.test(n.checkedCommit)?n.checkedCommit:...

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

index.jsView on unpkg · L9

96Trigger-reachable chain: manifest.main -> index.js L96: L97: `))}function T(e,t,n,r=n){e?e.stop(r):d[t](n)}var zc=[{suffixes:[".wordpress.com"],platform:{id:"wordpress.com",label:"WordPress.com",api:"wordpress",enableHint:"an application pas... L98: `,"utf-8"),n}catch{return null}}import{execFileSync as qy}from"child_process";var Vy=2048,Yy=200,zy=10,Jy=/^[A-Za-z0-9._-]+$/,Xy=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-... L99: `).replace(/\n+$/,`

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

Findings

2 Critical4 High4 Medium2 Low

CriticalSame File Env Network Executionindex.js

CriticalTrigger Reachable Dangerous Capabilityindex.js

HighChild Processindex.js

HighShell

HighCommand Output Exfiltrationindex.js

HighTrigger Reachable Command Output Exfiltrationindex.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSuspicious Lifecycle Evidencepackage.json

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @seoagent-official/seoagent@1.135.0.

The versions list below shows the verdict for each recorded version.

Review the evidence and your use of @seoagent-official/seoagent@1.135.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-04 19:51:44.344Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

130 known versions

1.135.0latestshownSuspiciousTelemetryWarnPublishedNov 4, 2026, 7:08 PM 1.134.0Clean—AllowPublishedNov 4, 2026, 7:10 AM 1.133.1Clean—AllowPublishedNov 4, 2026, 6:54 AM 1.133.0Clean—AllowPublishedNov 3, 2026, 10:09 PM

registry / Telemetry / @seoagent-official/seoagent

@seoagent-official/seoagent

This report shows the evidence for @seoagent-official/seoagent@1.135.0. 0 of 130 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.

Trigger

An unauthenticated sync when the project has a configured domain, unless telemetry is opted out.

Impact

The service learns which project domain ran sync without credentials; the source provides an opt-out and says the ping contains no paths or secrets.

Mechanism

The CLI posts a sync_unauthenticated event with a random install ID, CLI version, and project domain to its service telemetry endpoint.

AI rationale

Evidence

index.js.seoagent/project.md

Network endpoints1

seoagent.com/api/cli/telemetry

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The manifest exposes index.js as the SEOAgent CLI and declares the Claude Agent SDK as a runtime dependency; no lifecycle scripts are declared.
The unauthenticated-sync telemetry path attaches the project domain unless telemetry is opted out.
The event is POSTed to the service's /api/cli/telemetry endpoint.
The source describes the ping as including a random ID, CLI version, and project domain, and provides an SEOAGENT_TELEMETRY=0 opt-out.
The no-auth sync path invokes this event and reports when it was sent.

Evidence against

The package is an AI SEO CLI; invoking the Claude Agent SDK for requested SEO tasks matches its stated purpose.
The source describes the domain-bearing ping as containing no paths or secrets, and implements a telemetry opt-out.

Behavioral surface

Source

ChildProcessEnvironmentVarsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Source & flagged code

6 flagged

index.jsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

index.jsView on unpkg · L9

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

Findings

2 Critical4 High4 Medium2 Low

CriticalSame File Env Network Executionindex.js

CriticalTrigger Reachable Dangerous Capabilityindex.js

HighChild Processindex.js

HighShell

HighCommand Output Exfiltrationindex.js

HighTrigger Reachable Command Output Exfiltrationindex.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSuspicious Lifecycle Evidencepackage.json

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @seoagent-official/seoagent@1.135.0.

The versions list below shows the verdict for each recorded version.

Review the evidence and your use of @seoagent-official/seoagent@1.135.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-04 19:51:44.344Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

130 known versions

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

Runtime surface

Behavioral surface