registry / @seoagent-official/seoagent / 1.117.3
@seoagent-official/seoagent@1.117.3
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 22d ago · by lpm-firewall-aiThe package has no npm install hook, but its explicit setup command installs automatic Claude Code sync hooks with a latest-package fallback. This is a first-party agent extension lifecycle risk, so warn without blocking publication.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
After a user confirms project initialization, later Claude Code session-start or write/edit events invoke the hook.
Impact
Future agent events can automatically invoke package code and synchronize project state without a separate prompt for each event.
Mechanism
The package writes hook entries to the project's .claude/settings.json. The command runs seoagent sync --silent, with an npx latest-package fallback.
AI rationale
The package has no npm install hook, but its explicit setup command installs automatic Claude Code sync hooks with a latest-package fallback. This is a first-party agent extension lifecycle risk, so warn without blocking publication.
Evidence
index.js.claude/settings.json
Network endpoints1
seoagent.com
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The flagged source location names the project Claude settings file, and a helper writes hook configuration to that path.
- The manifest exposes a CLI entrypoint and declares no npm lifecycle script; installation alone does not run setup.
- The first-time init flow asks for project creation confirmation and then calls the hook writer.
- The writer registers package sync hooks for session start and post-write events; if the CLI is unavailable, the command falls back to npx for the latest package.
- The sync handler accepts hook input, and the default service endpoint is seoagent.com.
Evidence against
- The hook is set up through explicit CLI initialization, not an npm install lifecycle.
- The inspected hook runs the package's sync command; source does not show it changing unrelated agent permissions or performing destructive actions.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStrings
Source & flagged code
6 flaggedindex.jsView file
90L91: `))}function P(e,t,n,r=n){e?e.stop(r):d[t](n)}var dc=[{suffixes:[".wordpress.com"],platform:{id:"wordpress.com",label:"WordPress.com",api:"wordpress",enableHint:"an application pas...
L92: `,"utf-8"),n}catch{return null}}import{execFileSync as dh}from"child_process";var ph=2048,fh=200,gh=10,mh=/^[A-Za-z0-9._-]+$/,hh=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-...
L93: `))}function Jh(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${m("login")}...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L9090Trigger-reachable chain: manifest.main -> index.js
L90:
L91: `))}function P(e,t,n,r=n){e?e.stop(r):d[t](n)}var dc=[{suffixes:[".wordpress.com"],platform:{id:"wordpress.com",label:"WordPress.com",api:"wordpress",enableHint:"an application pas...
L92: `,"utf-8"),n}catch{return null}}import{execFileSync as dh}from"child_process";var ph=2048,fh=200,gh=10,mh=/^[A-Za-z0-9._-]+$/,hh=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-...
L93: `))}function Jh(){return`The setup code did not bind this project. Do not continue without a successful login \u2014 get a fresh code at seoagent.com/grok, then run \`${m("login")}...
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
index.jsFindings
2 Critical5 High3 Medium2 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighChild Processindex.js
HighShell
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
HighSemantic Analysis Limitedindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.117.3.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.117.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.