registry / @seoagent-official/seoagent / 1.100.4
@seoagent-official/seoagent@1.100.4
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 16d ago · by lpm-firewall-aiSource inspection found a CLI entrypoint without an install lifecycle hook. The flagged shell and network behavior is consistent with CLI operation and does not show command-output or credential exfiltration.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The CLI runs when a user invokes its command; package.json defines no install lifecycle hook.
Impact
No confirmed malicious effect was established from the inspected source.
Mechanism
The inspected telemetry path sends limited CLI metadata to the package-aligned SEOAgent API and checks opt-out settings. The shell command checks for Claude Code installation or credential status.
AI rationale
Source inspection found a CLI entrypoint without an install lifecycle hook. The flagged shell and network behavior is consistent with CLI operation and does not show command-output or credential exfiltration.
Evidence
package.jsonindex.js
Network endpoints1
seoagent.com/api/cli/telemetry
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes index.js as a CLI and defines no install lifecycle hook.
- index.js identifies local SEOAgent skill and Claude settings paths; this is configuration used by CLI features.
- Telemetry sends an install identifier, event, CLI version, and platform to the SEOAgent API, with an opt-out check.
- The flagged shell use checks whether Claude Code is installed and reads its credential status; inspected code does not send those credentials.
Evidence against
Behavioral surface
EnvironmentVarsNetwork
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedindex.jsView file
85- Bundle scaffolded.
L86: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as At}from"@clack/prompts";var u={info:e=>At.info(e),warn:e=>At.warn(e),error:e=>At.error(e),success:e=>At.success(e),s...
L87: `))}function Ff(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${h("login")}...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L8585Trigger-reachable chain: manifest.main -> index.js
L85: - Bundle scaffolded.
L86: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as At}from"@clack/prompts";var u={info:e=>At.info(e),warn:e=>At.warn(e),error:e=>At.error(e),success:e=>At.success(e),s...
L87: `))}function Ff(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${h("login")}...
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
index.jsView on unpkg · L8585- Bundle scaffolded.
L86: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as At}from"@clack/prompts";var u={info:e=>At.info(e),warn:e=>At.warn(e),error:e=>At.error(e),success:e=>At.success(e),s...
L87: `))}function Ff(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${h("login")}...
Findings
2 Critical2 High3 Medium5 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidenceindex.js
LowAi Review Evidenceindex.js
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.100.4.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.100.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.