@seoagent-official/seoagent@1.108.3
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 28d ago · by lpm-firewall-aiThe code forwards existing SEOAgent credentials to an unrestricted operator-configured API base, which meets the warning condition for credential forwarding. No concrete malicious chain or default unrelated recipient was found.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user configures SEOAGENT_API_BASE and invokes an authenticated CLI operation that makes an API request.
Impact
If the configured destination is untrusted, it can receive credentials intended for the SEOAgent service.
Mechanism
The selected destination is not allowlisted, and the CLI places both SEOAgent tokens in the request authorization header.
AI rationale
The code forwards existing SEOAgent credentials to an unrestricted operator-configured API base, which meets the warning condition for credential forwarding. No concrete malicious chain or default unrelated recipient was found.
Evidence
index.js
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- package.json exposes a CLI entry point and declares no install lifecycle hook.
- index.js configures Claude session-start and post-write hooks that run the SEOAgent sync command.
- index.js uses SEOAGENT_API_BASE as the API destination for environment-provided SEOAgent credentials, without restricting the destination.
- index.js sends the user and website tokens as a bearer authorization value to the selected API base.
Evidence against
- The Claude hook setup is performed by CLI project setup or refresh code, not by an npm install hook.
- No hidden default recipient or token theft behavior was established; the credential forwarding risk depends on an operator-configured API base.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedindex.jsView file
87- Bundle scaffolded.
L88: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as Ot}from"@clack/prompts";var u={info:e=>Ot.info(e),warn:e=>Ot.warn(e),error:e=>Ot.error(e),success:e=>Ot.success(e),s...
L89: `,"utf-8"),n}catch{return null}}var fg=1500,gg=900*1e3,mg=2700*1e3;function hg(e){return e?mg:gg}function yg(e){return`Waiting for browser confirmation\u2026 (up to ${Math.round(e/...
L90: `))}function jg(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${h("login")}...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L8787Trigger-reachable chain: manifest.main -> index.js
L87: - Bundle scaffolded.
L88: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as Ot}from"@clack/prompts";var u={info:e=>Ot.info(e),warn:e=>Ot.warn(e),error:e=>Ot.error(e),success:e=>Ot.success(e),s...
L89: `,"utf-8"),n}catch{return null}}var fg=1500,gg=900*1e3,mg=2700*1e3;function hg(e){return e?mg:gg}function yg(e){return`Waiting for browser confirmation\u2026 (up to ${Math.round(e/...
L90: `))}function jg(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${h("login")}...
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
Findings
2 Critical4 High4 Medium2 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighChild Processindex.js
HighShell
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.108.3.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.108.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.