registry / @seoagent-official/seoagent / 1.103.0
@seoagent-official/seoagent@1.103.0
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 28d ago · by lpm-firewall-aiThe package offers a guarded, explicit CLI setup that installs agent hooks and enables subsequent automatic cloud sync and action handling. This is an agent extension lifecycle risk, not evidence of a confirmed attack.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs `seoagent init` and subsequently starts a session or uses a matching write/edit tool.
Impact
Cloud-directed project changes can occur during later agent sessions; no malicious action is established by the inspected source.
Mechanism
The hooks run sync, which fetches actions from the SEOAgent cloud service and may apply returned project changes.
AI rationale
The package offers a guarded, explicit CLI setup that installs agent hooks and enables subsequent automatic cloud sync and action handling. This is an agent extension lifecycle risk, not evidence of a confirmed attack.
Evidence
index.js
Network endpoints1
seoagent.com
Decision evidence
public snapshotAI called this Suspicious at 83.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- `package.json` exposes `index.js` as the CLI and declares no install lifecycle hook.
- The `.claude/settings.json` hooks are installed through the explicit `seoagent init` command.
- The installed SessionStart and PostToolUse hooks run `seoagent sync`, or fall back to `npx` for the package’s latest release.
- Sync fetches cloud actions and can apply file changes, creating a guarded agent integration with later automatic activity.
Evidence against
- Inspected code shows no npm install-time trigger for the agent setup.
- The hooks target this package’s own SEO skill workflow; the inspected evidence does not establish credential theft or a malicious payload.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedindex.jsView file
87- Bundle scaffolded.
L88: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as Tt}from"@clack/prompts";var u={info:e=>Tt.info(e),warn:e=>Tt.warn(e),error:e=>Tt.error(e),success:e=>Tt.success(e),s...
L89: `,"utf-8"),n}catch{return null}}var cg=1500,ug=900*1e3,Ya="Login timed out. If the browser page shows a `seoagent login --code \u2026` line, run that here; otherwise run `seoagent ...
L90: `))}function Ag(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${m("login")}...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L8787Trigger-reachable chain: manifest.main -> index.js
L87: - Bundle scaffolded.
L88: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as Tt}from"@clack/prompts";var u={info:e=>Tt.info(e),warn:e=>Tt.warn(e),error:e=>Tt.error(e),success:e=>Tt.success(e),s...
L89: `,"utf-8"),n}catch{return null}}var cg=1500,ug=900*1e3,Ya="Login timed out. If the browser page shows a `seoagent login --code \u2026` line, run that here; otherwise run `seoagent ...
L90: `))}function Ag(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${m("login")}...
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
Findings
2 Critical5 High3 Medium2 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighChild Processindex.js
HighShell
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
HighSemantic Analysis Limitedindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.103.0.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.103.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.