registry / @seoagent-official/seoagent / 1.124.0
@seoagent-official/seoagent@1.124.0
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe source confirms first-party CLI setup that installs hooks for automatic authenticated sync during agent sessions. This merits a warning for the deferred agent extension behavior, but the inspected code does not establish a malicious attack.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The user invokes `seoagent init`; later Claude session starts and file writes or edits activate the hooks.
Impact
Project data is automatically exchanged with the SEOAgent service during agent sessions using the saved account credentials.
Mechanism
The hooks run `seoagent sync --silent`, falling back to an `npx` invocation when the CLI is unavailable. Sync sends stored SEOAgent credentials to the configured API base, defaulting to seoagent.com.
AI rationale
The source confirms first-party CLI setup that installs hooks for automatic authenticated sync during agent sessions. This merits a warning for the deferred agent extension behavior, but the inspected code does not establish a malicious attack.
Evidence
index.js.claude/settings.json
Network endpoints1
seoagent.com
Decision evidence
public snapshotAI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes `index.js` as the `seoagent` CLI and declares no npm lifecycle script; the hook setup is reached through the `init` command.
- `init` calls code that writes project-scoped Claude hooks to `.claude/settings.json`, including `SessionStart` and `PostToolUse` hooks for writes and edits.
- Those hooks run silent `seoagent sync`, with an `npx -y` fallback if the CLI is unavailable.
- Sync sends the saved SEOAgent authorization header to `/api/cli/sync`; the default API host is `seoagent.com`, with an environment-configurable base.
Evidence against
- The reviewed behavior is first-party project sync initiated by the user-run CLI setup; source inspection did not establish credential theft or unrelated broad agent configuration changes.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedindex.jsView file
9.sync-cursor
L10: `,zf=process.env.XDG_CONFIG_HOME&&process.env.XDG_CONFIG_HOME.trim().length>0?process.env.XDG_CONFIG_HOME:jt(Yf(),".config"),Z=jt(zf,"seoagent"),nt=jt(Z,"auth.json"),ei=jt(Z,"state...
L11: `),i=ig(r),s=i.length>0?i[0].indent:0,[a]=Fa(i,0,s);return{data:a,body:o}}function rt(e){if(!ng(e))return null;try{return ee(rg(e,"utf-8"))}catch{return null}}function sg(e){if(e==...
...
L15: `)?"":`
L16: `)}import{existsSync as kr,readdirSync as ag,statSync as lg}from"fs";import{join as Xe}from"path";var Ba=["svelte.config.js","svelte.config.ts","svelte.config.mjs","svelte.config.c...
L17: `).map(t=>t.trim()).filter(Boolean):[]}function Rr(e,t,n={}){let r=n.execGit??mg,o=n.sourceExists??((m,w)=>pg(fg(m,w))),i=n.checkedCommit&&Sr.test(n.checkedCommit)?n.checkedCommit:...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L996Trigger-reachable chain: manifest.main -> index.js
L96:
L97: `))}function P(e,t,n,r=n){e?e.stop(r):d[t](n)}var Rc=[{suffixes:[".wordpress.com"],platform:{id:"wordpress.com",label:"WordPress.com",api:"wordpress",enableHint:"an application pas...
L98: `,"utf-8"),n}catch{return null}}import{execFileSync as ry}from"child_process";var oy=2048,iy=200,sy=10,ay=/^[A-Za-z0-9._-]+$/,ly=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-...
L99: `).replace(/\n+$/,`
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
Findings
2 Critical4 High4 Medium2 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighChild Processindex.js
HighShell
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.124.0.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.124.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.