registry / @seoagent-official/seoagent / 1.115.0
@seoagent-official/seoagent@1.115.0
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 23d ago · by lpm-firewall-aiInitialization installs Claude Code hooks that trigger automatic first-party sync on later agent events. This is a guarded, package-owned extension capability rather than a confirmed attack, so warn rather than block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Running the seoagent init command; later Claude Code SessionStart or PostToolUse events trigger the installed hooks.
Impact
Project synchronization can occur automatically during agent sessions. The inspected code shows first-party sync behavior, not a confirmed hostile action.
Mechanism
The CLI writes hooks to .claude/settings.json that run seoagent sync --silent, falling back to npx for the package; sync sends authenticated project data to the SEOAgent service.
AI rationale
Initialization installs Claude Code hooks that trigger automatic first-party sync on later agent events. This is a guarded, package-owned extension capability rather than a confirmed attack, so warn rather than block.
Evidence
index.jspackage.json.claude/settings.json
Network endpoints1
seoagent.com/api/cli/sync
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes index.js as its seoagent CLI entrypoint.
- The CLI targets .claude/settings.json and installs PostToolUse and SessionStart hooks that run SEOAgent sync.
- The init flow installs those hooks; it asks to create the project before proceeding, with a noninteractive or --yes path available.
- The hook sync command sends authenticated requests to the package's default SEOAgent service endpoint.
Evidence against
- The manifest has no install lifecycle scripts; setup is performed through the explicit init command.
- The hook invokes the package's own sync command and the configured first-party service; inspected source does not establish malicious data collection or other hostile behavior.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedindex.jsView file
90L91: `))}function P(e,t,n,r=n){e?e.stop(r):d[t](n)}var Jl=[{suffixes:[".wordpress.com"],platform:{id:"wordpress.com",label:"WordPress.com",api:"wordpress",enableHint:"an application pas...
L92: `,"utf-8"),n}catch{return null}}import{execFileSync as Bm}from"child_process";var Hm=2048,Gm=200,Wm=10,Km=/^[A-Za-z0-9._-]+$/,qm=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-...
L93: `))}function Rh(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${m("login")}...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L9090Trigger-reachable chain: manifest.main -> index.js
L90:
L91: `))}function P(e,t,n,r=n){e?e.stop(r):d[t](n)}var Jl=[{suffixes:[".wordpress.com"],platform:{id:"wordpress.com",label:"WordPress.com",api:"wordpress",enableHint:"an application pas...
L92: `,"utf-8"),n}catch{return null}}import{execFileSync as Bm}from"child_process";var Hm=2048,Gm=200,Wm=10,Km=/^[A-Za-z0-9._-]+$/,qm=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-...
L93: `))}function Rh(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${m("login")}...
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
index.jsFindings
2 Critical4 High4 Medium2 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighChild Processindex.js
HighShell
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencepackage.json
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.115.0.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.115.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.