registry / @seoagent-official/seoagent / 1.100.0
@seoagent-official/seoagent@1.100.0
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 17d ago · by lpm-firewall-aiThe package manifest exposes a CLI and has no install lifecycle hook. The flagged shell and network behavior is part of runtime CLI functionality; inspected evidence did not establish an unconsented attack.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The CLI runs when a user invokes the seoagent command; project setup uses the init command.
Impact
No unconsented install-time mutation, credential disclosure, or other confirmed attack effect was established.
Mechanism
The inspected shell calls check Claude availability or credentials. Project setup references a Claude settings file and is exposed as an explicit CLI command.
AI rationale
The package manifest exposes a CLI and has no install lifecycle hook. The flagged shell and network behavior is part of runtime CLI functionality; inspected evidence did not establish an unconsented attack.
Evidence
package.jsonindex.js.claude/settings.json
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a CLI entrypoint; inspection found no install lifecycle hook.
- index.js uses .claude/settings.json for project setup, and that setup is exposed through the explicit init command.
- Telemetry is opt-out and sends an install identifier, event, CLI version, and platform; inspected callers associate it with CLI events.
- The shell calls inspected check for Claude availability or credentials, and the CLI parses user-supplied commands.
Evidence against
Behavioral surface
EnvironmentVarsNetwork
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedindex.jsView file
85- Bundle scaffolded.
L86: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as Rt}from"@clack/prompts";var u={info:e=>Rt.info(e),warn:e=>Rt.warn(e),error:e=>Rt.error(e),success:e=>Rt.success(e),s...
L87: `))}function Df(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${h("login")}...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L8585Trigger-reachable chain: manifest.main -> index.js
L85: - Bundle scaffolded.
L86: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as Rt}from"@clack/prompts";var u={info:e=>Rt.info(e),warn:e=>Rt.warn(e),error:e=>Rt.error(e),success:e=>Rt.success(e),s...
L87: `))}function Df(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${h("login")}...
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
index.jsView on unpkg · L8585- Bundle scaffolded.
L86: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as Rt}from"@clack/prompts";var u={info:e=>Rt.info(e),warn:e=>Rt.warn(e),error:e=>Rt.error(e),success:e=>Rt.success(e),s...
L87: `))}function Df(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${h("login")}...
Findings
2 Critical2 High3 Medium5 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidenceindex.js
LowAi Review Evidenceindex.js
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.100.0.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.100.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.