registry / @seoagent-official/seoagent / 1.128.0

@seoagent-official/seoagent@1.128.0

⚠ Under review

The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.

AI Security Review

scanned 11d ago · by lpm-firewall-ai

The package uses an unresolved runtime dependency in a CLI agent workflow that can run shell and file editing tools. No inspected source establishes malicious behavior, but the dependency source was unavailable, so manual review is warranted.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A user invokes the CLI process command; unattended operation requires explicit flags.

Impact

The unresolved SDK behavior prevents a clean determination; the inspected source does not establish an attack.

Mechanism

The command passes work to the Claude Agent SDK with shell and file editing tools. The SDK source was unavailable for inspection.

AI rationale

Evidence

package.jsonindex.js

Decision evidence

public snapshot

AI called this Manual Review at 84.0% confidence as Unknown with medium false-positive risk.

AI review observations

package.json declares @anthropic-ai/claude-agent-sdk as a runtime dependency, and index.js imports it in the agent workflow.
The workflow grants the SDK Bash, Write, and Edit tools; unattended mode enables permission bypass.
The CLI describes unattended mode as requiring --yes and limits it to disposable sandboxes.
The SDK implementation was not available for source inspection, leaving this runtime dependency unresolved.

Evidence against

package.json has no declared lifecycle hook.
The inspected entrypoint shows the agent workflow is invoked through a CLI command, with unattended operation behind explicit flags.

Behavioral surface

Source

ChildProcessEnvironmentVarsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 453 KB of source, external domains: 127.0.0.1, api.openai.com, api.replicate.com, console.anthropic.com, example.com, fal.run, registry.npmjs.org, seoagent.com, www.google.com

Source & flagged code

6 flagged

index.jsView file

9.sync-cursor L10: `,gg=process.env.XDG_CONFIG_HOME&&process.env.XDG_CONFIG_HOME.trim().length>0?process.env.XDG_CONFIG_HOME:Ft(fg(),".config"),Z=Ft(gg,"seoagent"),nt=Ft(Z,"auth.json"),ci=Ft(Z,"state... L11: `),i=$g(r),s=i.length>0?i[0].indent:0,[a]=Xa(i,0,s);return{data:a,body:o}}function rt(e){if(!xg(e))return null;try{return ee(_g(e,"utf-8"))}catch{return null}}function Sg(e){if(e==... ... L15: `)?"":` L16: `)}import{existsSync as Rr,readdirSync as Rg,statSync as Eg}from"fs";import{join as ot}from"path";var fi=["svelte.config.js","svelte.config.ts","svelte.config.mjs","svelte.config.c... L17: `).map(t=>t.trim()).filter(Boolean):[]}function Ir(e,t,n={}){let r=n.execGit??Dg,o=n.sourceExists??((y,w)=>Og(Ng(y,w))),i=n.checkedCommit&&Pr.test(n.checkedCommit)?n.checkedCommit:...

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

index.jsView on unpkg · L9

96Trigger-reachable chain: manifest.main -> index.js L96: L97: `))}function P(e,t,n,r=n){e?e.stop(r):d[t](n)}var Fc=[{suffixes:[".wordpress.com"],platform:{id:"wordpress.com",label:"WordPress.com",api:"wordpress",enableHint:"an application pas... L98: `,"utf-8"),n}catch{return null}}import{execFileSync as _y}from"child_process";var vy=2048,$y=200,Sy=10,Ry=/^[A-Za-z0-9._-]+$/,Ey=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-... L99: `).replace(/\n+$/,`

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

Findings

2 Critical4 High3 Medium3 Low

CriticalSame File Env Network Executionindex.js

CriticalTrigger Reachable Dangerous Capabilityindex.js

HighChild Processindex.js

HighShell

HighCommand Output Exfiltrationindex.js

HighTrigger Reachable Command Output Exfiltrationindex.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Dependency Evidencepackage.json

Affected versions and remediation

This report applies to @seoagent-official/seoagent@1.128.0.

See all versions of @seoagent-official/seoagent for other recorded verdicts.

Review the evidence and your use of @seoagent-official/seoagent@1.128.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-25 02:48:43.680Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / @seoagent-official/seoagent / 1.128.0

@seoagent-official/seoagent@1.128.0

⚠ Under review

AI Security Review

scanned 11d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A user invokes the CLI process command; unattended operation requires explicit flags.

Impact

The unresolved SDK behavior prevents a clean determination; the inspected source does not establish an attack.

Mechanism

The command passes work to the Claude Agent SDK with shell and file editing tools. The SDK source was unavailable for inspection.

AI rationale

Evidence

package.jsonindex.js

Decision evidence

public snapshot

AI called this Manual Review at 84.0% confidence as Unknown with medium false-positive risk.

AI review observations

package.json declares @anthropic-ai/claude-agent-sdk as a runtime dependency, and index.js imports it in the agent workflow.
The workflow grants the SDK Bash, Write, and Edit tools; unattended mode enables permission bypass.
The CLI describes unattended mode as requiring --yes and limits it to disposable sandboxes.
The SDK implementation was not available for source inspection, leaving this runtime dependency unresolved.

Evidence against

package.json has no declared lifecycle hook.
The inspected entrypoint shows the agent workflow is invoked through a CLI command, with unattended operation behind explicit flags.

Behavioral surface

Source

ChildProcessEnvironmentVarsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 453 KB of source, external domains: 127.0.0.1, api.openai.com, api.replicate.com, console.anthropic.com, example.com, fal.run, registry.npmjs.org, seoagent.com, www.google.com

Source & flagged code

6 flagged

index.jsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

index.jsView on unpkg · L9

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

Findings

2 Critical4 High3 Medium3 Low

CriticalSame File Env Network Executionindex.js

CriticalTrigger Reachable Dangerous Capabilityindex.js

HighChild Processindex.js

HighShell

HighCommand Output Exfiltrationindex.js

HighTrigger Reachable Command Output Exfiltrationindex.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Dependency Evidencepackage.json

Affected versions and remediation

This report applies to @seoagent-official/seoagent@1.128.0.

See all versions of @seoagent-official/seoagent for other recorded verdicts.

Review the evidence and your use of @seoagent-official/seoagent@1.128.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-25 02:48:43.680Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface