@seoagent-official/seoagent@1.100.5
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 17d ago · by lpm-firewall-aiSource inspection found no install lifecycle hooks or confirmed attack behavior. The scanner’s command and environment matches are consistent with CLI availability and local Claude session checks; the `.claude` sync integration is associated with user-invoked project setup or refresh.
Decision evidence
public snapshot- package.json has no install lifecycle hook and exposes index.js as the CLI entrypoint.
- The .claude settings path is used for SEOAgent sync hooks; setup code preserves existing hook entries and installs the sync command.
- The flagged Claude credential code checks whether a local session is usable; the macOS keychain result is parsed for that check.
- Static hints flag command-output exfiltration, but inspected command execution only checks for the Claude CLI or reads local credential status; no transfer of that output was established.
- The CLI’s documented init action is an explicit project setup command, and no automatic install-time agent configuration mutation was found.
Source & flagged code
7 flaggedA single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L85A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
index.jsView on unpkg · L85Findings
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.100.5.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.100.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.