registry / @seoagent-official/seoagent / 1.100.6
@seoagent-official/seoagent@1.100.6
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 17d ago · by lpm-firewall-aiSource inspection found no install-time execution or concrete attack behavior. Agent integration and telemetry are part of the user-invoked project setup and use the package's own service.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The project integration is created when a user runs the init command; the manifest declares no install lifecycle hook.
Impact
The inspected behavior supports the advertised project integration and does not establish a malicious attack surface.
Mechanism
Setup installs the SEOAgent skill and registers a Claude hook that runs the package's sync command. Initialization telemetry goes to the SEOAgent service and contains an installation identifier, event, CLI version, and platform.
AI rationale
Source inspection found no install-time execution or concrete attack behavior. Agent integration and telemetry are part of the user-invoked project setup and use the package's own service.
Evidence
.claude/skills/seoagent.claude/settings.json
Network endpoints1
seoagent.com
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- The identified agent integration path is the package-owned `.claude/skills/seoagent` skill directory; `.claude/settings.json` is a separate project settings file.
- The manifest exposes `index.js` as the CLI entrypoint and declares no lifecycle script in the inspected package manifest.
- The `init` command invokes project setup, which installs the SEOAgent skill and registers the local Claude hook.
- The hook runs the package's sync command at session start and after write or edit tool events.
- During initialization, telemetry sends an installation identifier, event name, CLI version, and platform to the SEOAgent service.
Evidence against
Behavioral surface
EnvironmentVarsNetwork
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedindex.jsView file
85- Bundle scaffolded.
L86: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as At}from"@clack/prompts";var u={info:e=>At.info(e),warn:e=>At.warn(e),error:e=>At.error(e),success:e=>At.success(e),s...
L87: `))}function Wf(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${h("login")}...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L8585Trigger-reachable chain: manifest.main -> index.js
L85: - Bundle scaffolded.
L86: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as At}from"@clack/prompts";var u={info:e=>At.info(e),warn:e=>At.warn(e),error:e=>At.error(e),success:e=>At.success(e),s...
L87: `))}function Wf(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${h("login")}...
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
index.jsView on unpkg · L8585- Bundle scaffolded.
L86: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as At}from"@clack/prompts";var u={info:e=>At.info(e),warn:e=>At.warn(e),error:e=>At.error(e),success:e=>At.success(e),s...
L87: `))}function Wf(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${h("login")}...
Findings
2 Critical3 High3 Medium4 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
HighSemantic Analysis Limitedindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidenceindex.js
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.100.6.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.100.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.