registry / @seoagent-official/seoagent / 1.121.0
@seoagent-official/seoagent@1.121.0
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe manifest exposes a CLI and has no install lifecycle scripts. Inspection of the flagged entrypoint behavior found package-aligned telemetry and user-invoked CLI capabilities, with no confirmed attack surface.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user invokes the seoagent CLI and runs a command that uses telemetry or the model workflow.
Impact
The inspected behavior does not establish credential theft, covert command-output exfiltration, or unconsented install-time modification of agent settings.
Mechanism
Telemetry posts CLI event metadata to the SEOAgent API, with opt-out flags; the model workflow configures Claude Agent SDK tools for the requested task.
AI rationale
The manifest exposes a CLI and has no install lifecycle scripts. Inspection of the flagged entrypoint behavior found package-aligned telemetry and user-invoked CLI capabilities, with no confirmed attack surface.
Network endpoints1
seoagent.com/api/cli/telemetry
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes index.js as a CLI and declares no lifecycle scripts.
- index.js defines a Claude skill path and settings-file path; the inspected target does not itself show a settings mutation.
- Telemetry is sent to the package’s SEOAgent API and contains an install identifier, event, CLI version, platform, and optional metadata; environment flags can disable it.
- The CLI’s model execution path is invoked through its command workflow and configures Claude Agent SDK tools, including Bash.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedindex.jsView file
9.sync-cursor
L10: `,Wf=process.env.XDG_CONFIG_HOME&&process.env.XDG_CONFIG_HOME.trim().length>0?process.env.XDG_CONFIG_HOME:jt(Gf(),".config"),ee=jt(Wf,"seoagent"),tt=jt(ee,"auth.json"),Zo=jt(ee,"st...
L11: `),i=eg(r),s=i.length>0?i[0].indent:0,[a]=Da(i,0,s);return{data:a,body:o}}function nt(e){if(!Xf(e))return null;try{return te(Qf(e,"utf-8"))}catch{return null}}function tg(e){if(e==...
...
L15: `)?"":`
L16: `)}import{existsSync as kr,readdirSync as ng,statSync as rg}from"fs";import{join as Je}from"path";var Ua=["svelte.config.js","svelte.config.ts","svelte.config.mjs","svelte.config.c...
L17: `).map(t=>t.trim()).filter(Boolean):[]}function Sr(e,t,n={}){let r=n.execGit??ug,o=n.sourceExists??((m,w)=>ag(lg(m,w))),i=n.checkedCommit&&$r.test(n.checkedCommit)?n.checkedCommit:...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L996Trigger-reachable chain: manifest.main -> index.js
L96:
L97: `))}function P(e,t,n,r=n){e?e.stop(r):d[t](n)}var $c=[{suffixes:[".wordpress.com"],platform:{id:"wordpress.com",label:"WordPress.com",api:"wordpress",enableHint:"an application pas...
L98: `,"utf-8"),n}catch{return null}}import{execFileSync as Yh}from"child_process";var zh=2048,Jh=200,Xh=10,Qh=/^[A-Za-z0-9._-]+$/,Zh=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-...
L99: `).replace(/\n+$/,`
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
Findings
2 Critical4 High3 Medium3 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighChild Processindex.js
HighShell
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.121.0.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.121.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.