registry / @seoagent-official/seoagent / 1.100.3
@seoagent-official/seoagent@1.100.3
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 16d ago · by lpm-firewall-aiThe scanner’s command and network matches resolve to local Claude CLI and Keychain checks, ordinary CLI networking, and limited package-service telemetry. The manifest has no lifecycle hooks, and the inspected source does not establish an attack.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user invokes the seoagent CLI; telemetry is sent from CLI event handlers unless disabled by the supported opt-out.
Impact
The inspected behavior supports CLI telemetry and local session detection; no unrelated credential disclosure or command-output exfiltration was established.
Mechanism
Telemetry sends an install ID, event name, CLI version, and platform to the package service. Claude session checks read local credential state and do not send it.
AI rationale
The scanner’s command and network matches resolve to local Claude CLI and Keychain checks, ordinary CLI networking, and limited package-service telemetry. The manifest has no lifecycle hooks, and the inspected source does not establish an attack.
Evidence
package.jsonindex.js
Network endpoints1
seoagent.com/api/cli/telemetry
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes index.js as a CLI entrypoint and declares no lifecycle scripts.
- index.js defines local skill and settings paths; the CLI command parser runs when invoked.
- Claude credential checks only classify local session availability; Keychain output is parsed locally.
- Telemetry sends an install ID, event, CLI version, and platform to the package service; an opt-out is supported.
Evidence against
- No inspected source shows command output or credentials being sent to an unrelated recipient.
- The reported shell calls check for the Claude CLI or inspect the local macOS Keychain; their output is not transmitted.
Behavioral surface
EnvironmentVarsNetwork
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedindex.jsView file
85- Bundle scaffolded.
L86: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as At}from"@clack/prompts";var u={info:e=>At.info(e),warn:e=>At.warn(e),error:e=>At.error(e),success:e=>At.success(e),s...
L87: `))}function Df(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${m("login")}...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L8585Trigger-reachable chain: manifest.main -> index.js
L85: - Bundle scaffolded.
L86: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as At}from"@clack/prompts";var u={info:e=>At.info(e),warn:e=>At.warn(e),error:e=>At.error(e),success:e=>At.success(e),s...
L87: `))}function Df(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${m("login")}...
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
index.jsView on unpkg · L8585- Bundle scaffolded.
L86: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as At}from"@clack/prompts";var u={info:e=>At.info(e),warn:e=>At.warn(e),error:e=>At.error(e),success:e=>At.success(e),s...
L87: `))}function Df(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${m("login")}...
Findings
2 Critical2 High3 Medium5 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidenceindex.js
LowAi Review Evidenceindex.js
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.100.3.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.100.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.