registry / @seoagent-official/seoagent / 1.123.0
@seoagent-official/seoagent@1.123.0
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and source inspection found no concrete credential theft or unrelated exfiltration. The flagged shell, network, and agent capabilities support the package's user-invoked CLI and setup workflows.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user invokes the CLI; project sync hooks are installed during setup and later run on session start and after file write or edit events.
Impact
No unauthorized install-time mutation, unrelated credential transfer, or concrete malicious effect was established.
Mechanism
The hooks run the package sync command. Agent processing requires explicit command options, and unattended mode is documented for disposable sandboxes.
AI rationale
The manifest has no install lifecycle hook, and source inspection found no concrete credential theft or unrelated exfiltration. The flagged shell, network, and agent capabilities support the package's user-invoked CLI and setup workflows.
Evidence
.claude/settings.json
Network endpoints1
seoagent.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes the CLI through index.js and contains no npm lifecycle script.
- The project-local .claude/settings.json target receives session-start and post-write/edit sync hooks during explicit project setup.
- Those hooks run the package's sync command.
- Unattended processing requires --yes, is documented for disposable sandboxes, and withholds sensitive action types that lack owner approval.
- Initialization telemetry goes to the SEOAgent API and can be disabled through telemetry or do-not-track environment settings.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedindex.jsView file
9.sync-cursor
L10: `,zf=process.env.XDG_CONFIG_HOME&&process.env.XDG_CONFIG_HOME.trim().length>0?process.env.XDG_CONFIG_HOME:jt(Yf(),".config"),Z=jt(zf,"seoagent"),nt=jt(Z,"auth.json"),Zo=jt(Z,"state...
L11: `),i=ig(r),s=i.length>0?i[0].indent:0,[a]=Fa(i,0,s);return{data:a,body:o}}function rt(e){if(!ng(e))return null;try{return ee(rg(e,"utf-8"))}catch{return null}}function sg(e){if(e==...
...
L15: `)?"":`
L16: `)}import{existsSync as kr,readdirSync as ag,statSync as lg}from"fs";import{join as Xe}from"path";var Ba=["svelte.config.js","svelte.config.ts","svelte.config.mjs","svelte.config.c...
L17: `).map(t=>t.trim()).filter(Boolean):[]}function Sr(e,t,n={}){let r=n.execGit??mg,o=n.sourceExists??((m,w)=>pg(fg(m,w))),i=n.checkedCommit&&$r.test(n.checkedCommit)?n.checkedCommit:...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L996Trigger-reachable chain: manifest.main -> index.js
L96:
L97: `))}function P(e,t,n,r=n){e?e.stop(r):d[t](n)}var Ec=[{suffixes:[".wordpress.com"],platform:{id:"wordpress.com",label:"WordPress.com",api:"wordpress",enableHint:"an application pas...
L98: `,"utf-8"),n}catch{return null}}import{execFileSync as Zh}from"child_process";var ey=2048,ty=200,ny=10,ry=/^[A-Za-z0-9._-]+$/,oy=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-...
L99: `).replace(/\n+$/,`
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
Findings
2 Critical4 High3 Medium3 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighChild Processindex.js
HighShell
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.123.0.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.123.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.