registry / @seoagent-official/seoagent / 1.120.0
@seoagent-official/seoagent@1.120.0
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 20d ago · by lpm-firewall-aiThe manifest exposes a CLI and has no npm lifecycle hook. The Claude integration and Bash-capable agent runner are part of explicit setup and processing commands, with no independent attack behavior established.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The user invokes init to set up the project or invokes the separate inbox processing command.
Impact
No install-time execution, credential theft, or hidden command-output transfer was established.
Mechanism
Setup installs the local skill and Claude sync hooks; the hooks run the package's sync function. Inbox processing uses the Claude Agent SDK, with permission bypass limited to unattended mode.
AI rationale
The manifest exposes a CLI and has no npm lifecycle hook. The Claude integration and Bash-capable agent runner are part of explicit setup and processing commands, with no independent attack behavior established.
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes index.js as the seoagent CLI entrypoint.
- The agent integration targets local SEOAgent skill and Claude settings paths; setup runs through the init command and asks the user to confirm project creation.
- The installed Claude hooks run SEOAgent sync at session start and after tool use; they do not start the agent runner.
- Inbox processing is a separate CLI command that invokes the Claude Agent SDK; permission bypass is limited to its unattended mode.
Evidence against
- Setup can persist hooks in Claude settings, and the agent runner can use Bash; both are visible product capabilities.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedindex.jsView file
9.sync-cursor
L10: `,Uf=process.env.XDG_CONFIG_HOME&&process.env.XDG_CONFIG_HOME.trim().length>0?process.env.XDG_CONFIG_HOME:jt(Ff(),".config"),ee=jt(Uf,"seoagent"),tt=jt(ee,"auth.json"),Qo=jt(ee,"st...
L11: `),i=zf(r),s=i.length>0?i[0].indent:0,[a]=Na(i,0,s);return{data:a,body:o}}function nt(e){if(!qf(e))return null;try{return te(Vf(e,"utf-8"))}catch{return null}}function Jf(e){if(e==...
...
L15: `)?"":`
L16: `)}import{existsSync as kr,readdirSync as Xf,statSync as Qf}from"fs";import{join as Je}from"path";var Fa=["svelte.config.js","svelte.config.ts","svelte.config.mjs","svelte.config.c...
L17: `).map(t=>t.trim()).filter(Boolean):[]}function Sr(e,t,n={}){let r=n.execGit??ig,o=n.sourceExists??((m,w)=>ng(rg(m,w))),i=n.checkedCommit&&$r.test(n.checkedCommit)?n.checkedCommit:...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L996Trigger-reachable chain: manifest.main -> index.js
L96:
L97: `))}function P(e,t,n,r=n){e?e.stop(r):d[t](n)}var _c=[{suffixes:[".wordpress.com"],platform:{id:"wordpress.com",label:"WordPress.com",api:"wordpress",enableHint:"an application pas...
L98: `,"utf-8"),n}catch{return null}}import{execFileSync as Gh}from"child_process";var Wh=2048,Kh=200,qh=10,Vh=/^[A-Za-z0-9._-]+$/,Yh=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-...
L99: `).replace(/\n+$/,`
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
Findings
2 Critical5 High3 Medium2 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighChild Processindex.js
HighShell
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
HighSemantic Analysis Limitedindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.120.0.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.120.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.