registry / @seoagent-official/seoagent / 1.124.3

@seoagent-official/seoagent@1.124.3

⚠ Under review

The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.

AI Security Review

scanned 15d ago · by lpm-firewall-ai

The manifest and entrypoint show no install hook or confirmed attack. The runtime agent SDK is an unresolved dependency used in an execution path that permits Bash, so the source review cannot resolve safety and requires manual review.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

The CLI’s task processing path invokes the agent SDK; unattended processing enables permission bypass.

Impact

The effect of the unresolved dependency’s behavior cannot be determined from this package snapshot.

Mechanism

The SDK receives task prompts and can use Read, Write, Edit, Bash, Grep, and Glob tools. Its implementation was unavailable for inspection.

AI rationale

Evidence

package.jsonindex.js

Decision evidence

public snapshot

AI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.

AI review observations

package.json declares @anthropic-ai/claude-agent-sdk as a runtime dependency, but its source was unavailable for review.
index.js imports the SDK query function and uses it to run tasks with Bash among the allowed tools; unattended runs enable permission bypass.
The entrypoint’s telemetry function sends a bounded JSON event to the configured SEOAgent API.

Evidence against

The manifest has no lifecycle scripts; the flagged shell calls inspected check for Claude Code and read local session status.

Behavioral surface

Source

ChildProcessEnvironmentVarsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 441 KB of source, external domains: 127.0.0.1, api.openai.com, api.replicate.com, console.anthropic.com, example.com, fal.run, registry.npmjs.org, seoagent.com, www.google.com

Source & flagged code

6 flagged

index.jsView file

9.sync-cursor L10: `,eg=process.env.XDG_CONFIG_HOME&&process.env.XDG_CONFIG_HOME.trim().length>0?process.env.XDG_CONFIG_HOME:Ft(Zf(),".config"),Z=Ft(eg,"seoagent"),tt=Ft(Z,"auth.json"),ri=Ft(Z,"state... L11: `),i=ug(r),s=i.length>0?i[0].indent:0,[a]=Wa(i,0,s);return{data:a,body:o}}function nt(e){if(!ag(e))return null;try{return ee(lg(e,"utf-8"))}catch{return null}}function dg(e){if(e==... ... L15: `)?"":` L16: `)}import{existsSync as vr,readdirSync as pg,statSync as fg}from"fs";import{join as rt}from"path";var ai=["svelte.config.js","svelte.config.ts","svelte.config.mjs","svelte.config.c... L17: `).map(t=>t.trim()).filter(Boolean):[]}function Cr(e,t,n={}){let r=n.execGit??vg,o=n.sourceExists??((m,w)=>bg(kg(m,w))),i=n.checkedCommit&&Er.test(n.checkedCommit)?n.checkedCommit:...

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

index.jsView on unpkg · L9

96Trigger-reachable chain: manifest.main -> index.js L96: L97: `))}function P(e,t,n,r=n){e?e.stop(r):d[t](n)}var Tc=[{suffixes:[".wordpress.com"],platform:{id:"wordpress.com",label:"WordPress.com",api:"wordpress",enableHint:"an application pas... L98: `,"utf-8"),n}catch{return null}}import{execFileSync as cy}from"child_process";var uy=2048,dy=200,py=10,fy=/^[A-Za-z0-9._-]+$/,gy=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-... L99: `).replace(/\n+$/,`

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

Findings

2 Critical5 High3 Medium2 Low

CriticalSame File Env Network Executionindex.js

CriticalTrigger Reachable Dangerous Capabilityindex.js

HighChild Processindex.js

HighShell

HighCommand Output Exfiltrationindex.js

HighTrigger Reachable Command Output Exfiltrationindex.js

HighSemantic Analysis Limitedindex.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @seoagent-official/seoagent@1.124.3.

See all versions of @seoagent-official/seoagent for other recorded verdicts.

Review the evidence and your use of @seoagent-official/seoagent@1.124.3 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-21 05:42:20.554Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / @seoagent-official/seoagent / 1.124.3

@seoagent-official/seoagent@1.124.3

⚠ Under review

AI Security Review

scanned 15d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.

Trigger

The CLI’s task processing path invokes the agent SDK; unattended processing enables permission bypass.

Impact

The effect of the unresolved dependency’s behavior cannot be determined from this package snapshot.

Mechanism

The SDK receives task prompts and can use Read, Write, Edit, Bash, Grep, and Glob tools. Its implementation was unavailable for inspection.

AI rationale

Evidence

package.jsonindex.js

Decision evidence

public snapshot

AI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.

AI review observations

package.json declares @anthropic-ai/claude-agent-sdk as a runtime dependency, but its source was unavailable for review.
index.js imports the SDK query function and uses it to run tasks with Bash among the allowed tools; unattended runs enable permission bypass.
The entrypoint’s telemetry function sends a bounded JSON event to the configured SEOAgent API.

Evidence against

The manifest has no lifecycle scripts; the flagged shell calls inspected check for Claude Code and read local session status.

Behavioral surface

Source

ChildProcessEnvironmentVarsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 441 KB of source, external domains: 127.0.0.1, api.openai.com, api.replicate.com, console.anthropic.com, example.com, fal.run, registry.npmjs.org, seoagent.com, www.google.com

Source & flagged code

6 flagged

index.jsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

index.jsView on unpkg · L9

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

Findings

2 Critical5 High3 Medium2 Low

CriticalSame File Env Network Executionindex.js

CriticalTrigger Reachable Dangerous Capabilityindex.js

HighChild Processindex.js

HighShell

HighCommand Output Exfiltrationindex.js

HighTrigger Reachable Command Output Exfiltrationindex.js

HighSemantic Analysis Limitedindex.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @seoagent-official/seoagent@1.124.3.

See all versions of @seoagent-official/seoagent for other recorded verdicts.

Review the evidence and your use of @seoagent-official/seoagent@1.124.3 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-21 05:42:20.554Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface