@seoagent-official/seoagent@1.106.1
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 28d ago · by lpm-firewall-aiStatic source inspection found a concrete conditional credential-forwarding risk: an operator-configured API base receives stored SEOAgent tokens during sync. The behavior is gated by user configuration and login, so this warrants a warning rather than a publish block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user configures SEOAGENT_API_BASE or logs in with an API base, then runs sync; configured Claude hooks can also invoke sync.
Impact
If the selected endpoint is not trusted, it can receive the account tokens and potentially access the associated SEOAgent account.
Mechanism
The CLI uses the selected API base for authenticated requests and places the stored user and website tokens in the Authorization header. No destination allowlist is evident in the inspected flow.
AI rationale
Static source inspection found a concrete conditional credential-forwarding risk: an operator-configured API base receives stored SEOAgent tokens during sync. The behavior is gated by user configuration and login, so this warrants a warning rather than a publish block.
Evidence
index.js
Network endpoints1
seoagent.com
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json exposes a CLI entrypoint and shows no npm lifecycle hook.
- The flagged entrypoint location identifies the Claude skill and settings paths.
- SEOAGENT_API_BASE can replace the default seoagent.com API base.
- The CLI stores login tokens and the selected API base; sync uses those tokens with that base.
- Claude hooks run sync at session start and after Write or Edit operations.
- The sync request sends its Authorization header to the selected API base.
Evidence against
- The credential flow is conditional on login and sync; no hidden token collection or unrelated fixed recipient was identified.
- The agent hooks are installed through the CLI setup flow, not an npm install hook.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedindex.jsView file
87- Bundle scaffolded.
L88: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as Tt}from"@clack/prompts";var u={info:e=>Tt.info(e),warn:e=>Tt.warn(e),error:e=>Tt.error(e),success:e=>Tt.success(e),s...
L89: `,"utf-8"),n}catch{return null}}var pg=1500,fg=900*1e3,Ja="Login timed out. If the browser page shows a `seoagent login --code \u2026` line, run that here; otherwise run `seoagent ...
L90: `))}function Og(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${m("login")}...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L8787Trigger-reachable chain: manifest.main -> index.js
L87: - Bundle scaffolded.
L88: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as Tt}from"@clack/prompts";var u={info:e=>Tt.info(e),warn:e=>Tt.warn(e),error:e=>Tt.error(e),success:e=>Tt.success(e),s...
L89: `,"utf-8"),n}catch{return null}}var pg=1500,fg=900*1e3,Ja="Login timed out. If the browser page shows a `seoagent login --code \u2026` line, run that here; otherwise run `seoagent ...
L90: `))}function Og(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${m("login")}...
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
Findings
2 Critical5 High3 Medium2 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighChild Processindex.js
HighShell
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
HighSemantic Analysis Limitedindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.106.1.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.106.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.