@seoagent-official/seoagent@1.119.3
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 20d ago · by lpm-firewall-aiThe package installs persistent Claude configuration through an explicit CLI setup flow, and that configuration enables automatic project sync. This is a first-party agent integration capability with residual risk, not evidence of a concrete attack.
Decision evidence
public snapshot- package.json exposes index.js as the CLI entrypoint.
- The flagged integration targets the project-local Claude skill and settings paths.
- The init command registers a Claude skill, and its handler writes project settings hooks.
- The hooks run at PostToolUse and SessionStart, invoking sync with an npx fallback for the same package.
- Sync writes cloud artifact content into the project state directory.
- The configured service endpoint is https://seoagent.com.
Source & flagged code
6 flaggedA single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L9A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
Findings
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.119.3.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.119.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.