registry / @seoagent-official/seoagent / 1.100.7
@seoagent-official/seoagent@1.100.7
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 17d ago · by lpm-firewall-aiThe package’s agent setup is a first-party feature reached through an explicit CLI command, so the evidence does not support blocking it as install-time malware. The persistent hook and latest-release fallback leave an agent integration lifecycle risk, warranting a warning.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs seoagent init; afterward, Claude Code starts a session or completes a Write or Edit event.
Impact
This creates ongoing package-controlled execution in the project’s Claude Code environment, with updates able to change the code that runs.
Mechanism
The hook runs the installed CLI when available, or invokes the latest package release through npx, then runs sync.
AI rationale
The package’s agent setup is a first-party feature reached through an explicit CLI command, so the evidence does not support blocking it as install-time malware. The persistent hook and latest-release fallback leave an agent integration lifecycle risk, warranting a warning.
Evidence
package.jsonindex.js.claude/settings.json
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json exposes index.js as the CLI entrypoint and contains no npm lifecycle scripts.
- index.js identifies the package skill directory and the project Claude settings file.
- The init command installs the skill, and its setup path registers the Claude hook.
- The hook runs at session start and after Write or Edit events, invoking sync through the installed CLI or the latest package release.
Evidence against
- The hook is installed through the explicit init command, not an npm install lifecycle.
- The observed hook invokes the package's sync command; the inspected source did not establish credential theft or another concrete attack.
Behavioral surface
EnvironmentVarsNetwork
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedindex.jsView file
85- Bundle scaffolded.
L86: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as At}from"@clack/prompts";var u={info:e=>At.info(e),warn:e=>At.warn(e),error:e=>At.error(e),success:e=>At.success(e),s...
L87: `))}function Wf(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${h("login")}...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L8585Trigger-reachable chain: manifest.main -> index.js
L85: - Bundle scaffolded.
L86: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as At}from"@clack/prompts";var u={info:e=>At.info(e),warn:e=>At.warn(e),error:e=>At.error(e),success:e=>At.success(e),s...
L87: `))}function Wf(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${h("login")}...
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
index.jsView on unpkg · L8585- Bundle scaffolded.
L86: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as At}from"@clack/prompts";var u={info:e=>At.info(e),warn:e=>At.warn(e),error:e=>At.error(e),success:e=>At.success(e),s...
L87: `))}function Wf(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${h("login")}...
Findings
2 Critical3 High5 Medium2 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
HighSemantic Analysis Limitedindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
MediumSuspicious Lifecycle Evidencepackage.json
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.100.7.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.100.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.