registry / @seoagent-official/seoagent / 1.101.2
@seoagent-official/seoagent@1.101.2
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 28d ago · by lpm-firewall-aiSource inspection found a CLI-only package entry and no lifecycle hooks. The scanner’s execution and network indicators correspond to runtime CLI behavior, and the inspected agent integration paths are package-specific setup hints rather than proof of malicious mutation.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs the seoagent CLI, including its explicit project setup command.
Impact
No unconsented install-time mutation, credential exfiltration, or other concrete attack was established.
Mechanism
The inspected code checks local Claude session availability and identifies SEOAgent skill and settings locations. The manifest has no npm lifecycle hook.
AI rationale
Source inspection found a CLI-only package entry and no lifecycle hooks. The scanner’s execution and network indicators correspond to runtime CLI behavior, and the inspected agent integration paths are package-specific setup hints rather than proof of malicious mutation.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes index.js as a CLI and defines no npm lifecycle hook.
- The integration paths are SEOAgent skill directories and Claude settings; the CLI exposes setup through an explicit init command.
- The credential check reads local Claude credential state and reports whether a session is available; this excerpt does not send the credential.
- The package’s inspected commands and network calls are runtime CLI behavior; no install-time attack was identified.
Evidence against
- The scanner flagged command execution and network access, but inspected code uses those capabilities for CLI tasks such as checking Claude availability and communicating with the package’s service.
- The agent configuration hints identify SEOAgent skill locations and a Claude settings hook; they do not establish an unconsented npm-install mutation.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStrings
Source & flagged code
6 flaggedindex.jsView file
85- Bundle scaffolded.
L86: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as At}from"@clack/prompts";var u={info:e=>At.info(e),warn:e=>At.warn(e),error:e=>At.error(e),success:e=>At.success(e),s...
L87: `))}function eg(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${m("login")}...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L8585Trigger-reachable chain: manifest.main -> index.js
L85: - Bundle scaffolded.
L86: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as At}from"@clack/prompts";var u={info:e=>At.info(e),warn:e=>At.warn(e),error:e=>At.error(e),success:e=>At.success(e),s...
L87: `))}function eg(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${m("login")}...
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
index.jsView on unpkg · L8585- Bundle scaffolded.
L86: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as At}from"@clack/prompts";var u={info:e=>At.info(e),warn:e=>At.warn(e),error:e=>At.error(e),success:e=>At.success(e),s...
L87: `))}function eg(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${m("login")}...
Findings
2 Critical4 High3 Medium3 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighChild Processindex.js
HighShell
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidenceindex.js
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.101.2.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.101.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.