@seoagent-official/seoagent@1.108.2
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 28d ago · by lpm-firewall-aiThe package has no npm install hook, but its explicit CLI setup adds automatic Claude Code sync hooks, which is a guarded agent integration capability. Source inspection found no concrete attack behavior supporting a block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs the SEOAgent project initialization command; configured hooks run during Claude Code sessions.
Impact
Later automatic sync may access and update SEOAgent project data through the package's service. Inspected source does not establish malicious behavior.
Mechanism
Initialization writes SEOAgent hook entries to the project's .claude/settings.json; the hook runs the local CLI or falls back to npx for this package.
AI rationale
The package has no npm install hook, but its explicit CLI setup adds automatic Claude Code sync hooks, which is a guarded agent integration capability. Source inspection found no concrete attack behavior supporting a block.
Evidence
index.jspackage.json.claude/settings.json
Network endpoints2
registry.npmjs.orgseoagent.com
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json exposes index.js as a CLI and declares no lifecycle hook.
- The package defines a Claude Code hook that runs `seoagent sync` or falls back to `npx -y @seoagent-official/seoagent@latest sync --silent`.
- The hook is added to project settings by the CLI initialization flow, creating an explicit-command agent integration with later automatic sync execution.
Evidence against
- The package has no npm install lifecycle script, so installation alone does not modify agent settings.
- The hook invokes this package's sync command; inspected source did not establish credential theft, unrelated data exfiltration, or other concrete attack behavior.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedindex.jsView file
87- Bundle scaffolded.
L88: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as Tt}from"@clack/prompts";var u={info:e=>Tt.info(e),warn:e=>Tt.warn(e),error:e=>Tt.error(e),success:e=>Tt.success(e),s...
L89: `,"utf-8"),n}catch{return null}}var pg=1500,fg=900*1e3,Ja="Login timed out. If the browser page shows a `seoagent login --code \u2026` line, run that here; otherwise run `seoagent ...
L90: `))}function Og(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${m("login")}...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L8787Trigger-reachable chain: manifest.main -> index.js
L87: - Bundle scaffolded.
L88: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as Tt}from"@clack/prompts";var u={info:e=>Tt.info(e),warn:e=>Tt.warn(e),error:e=>Tt.error(e),success:e=>Tt.success(e),s...
L89: `,"utf-8"),n}catch{return null}}var pg=1500,fg=900*1e3,Ja="Login timed out. If the browser page shows a `seoagent login --code \u2026` line, run that here; otherwise run `seoagent ...
L90: `))}function Og(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${m("login")}...
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
Findings
2 Critical4 High4 Medium2 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighChild Processindex.js
HighShell
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.108.2.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.108.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.