registry / Telemetry / @seoagent-official/seoagent / 1.130.0

@seoagent-official/seoagent@1.130.0

The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

The package sends the current project domain to its own telemetry endpoint by default in an unauthenticated event flow. It describes the ping and provides opt-out controls, but the domain is identifying project information, so this merits a warning rather than a block.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A CLI flow that reports an event when no credential is found; telemetry is enabled unless opted out.

Impact

The domain identifies the user's project and is sent without an explicit opt-in, creating a limited privacy risk.

Mechanism

The telemetry payload includes the project domain and is posted to the SEOAgent telemetry endpoint.

AI rationale

Evidence

index.js

Network endpoints1

seoagent.com/api/cli/telemetry

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

When no credential is found, the CLI can send a telemetry event containing the project domain.
The event is posted to the SEOAgent telemetry endpoint.

Evidence against

The package describes the ping as anonymous and says it sends no paths or secrets.
Users can disable telemetry with SEOAGENT_TELEMETRY=0 or DO_NOT_TRACK.
The manifest exposes a CLI entry point and describes the package as an AI SEO agent.

Behavioral surface

Source

ChildProcessEnvironmentVarsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 459 KB of source, external domains: 127.0.0.1, api.openai.com, api.replicate.com, console.anthropic.com, example.com, fal.run, registry.npmjs.org, seoagent.com, www.google.com

Source & flagged code

6 flagged

index.jsView file

9.sync-cursor L10: `,Sg=process.env.XDG_CONFIG_HOME&&process.env.XDG_CONFIG_HOME.trim().length>0?process.env.XDG_CONFIG_HOME:Mt($g(),".config"),te=Mt(Sg,"seoagent"),nt=Mt(te,"auth.json"),di=Mt(te,"st... L11: `),i=Ng(r),s=i.length>0?i[0].indent:0,[a]=el(i,0,s);return{data:a,body:o}}function rt(e){if(!Ig(e))return null;try{return ne(Og(e,"utf-8"))}catch{return null}}function Dg(e){if(e==... ... L15: `)?"":` L16: `)}import{existsSync as Rr,readdirSync as jg,statSync as Fg}from"fs";import{join as ot}from"path";var hi=["svelte.config.js","svelte.config.ts","svelte.config.mjs","svelte.config.c... L17: `).map(t=>t.trim()).filter(Boolean):[]}function Ir(e,t,n={}){let r=n.execGit??Vg,o=n.sourceExists??((h,w)=>Wg(Kg(h,w))),i=n.checkedCommit&&Pr.test(n.checkedCommit)?n.checkedCommit:...

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

index.jsView on unpkg · L9

96Trigger-reachable chain: manifest.main -> index.js L96: L97: `))}function P(e,t,n,r=n){e?e.stop(r):d[t](n)}var Bc=[{suffixes:[".wordpress.com"],platform:{id:"wordpress.com",label:"WordPress.com",api:"wordpress",enableHint:"an application pas... L98: `,"utf-8"),n}catch{return null}}import{execFileSync as Oy}from"child_process";var Ly=2048,Ny=200,Dy=10,jy=/^[A-Za-z0-9._-]+$/,Fy=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-... L99: `).replace(/\n+$/,`

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

Findings

2 Critical4 High4 Medium2 Low

CriticalSame File Env Network Executionindex.js

CriticalTrigger Reachable Dangerous Capabilityindex.js

HighChild Processindex.js

HighShell

HighCommand Output Exfiltrationindex.js

HighTrigger Reachable Command Output Exfiltrationindex.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumAi Review Evidenceindex.js

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @seoagent-official/seoagent@1.130.0.

See all versions of @seoagent-official/seoagent for other recorded verdicts.

Review the evidence and your use of @seoagent-official/seoagent@1.130.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-01 21:13:40.348Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / Telemetry / @seoagent-official/seoagent / 1.130.0

@seoagent-official/seoagent@1.130.0

AI Security Review

scanned 3d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A CLI flow that reports an event when no credential is found; telemetry is enabled unless opted out.

Impact

The domain identifies the user's project and is sent without an explicit opt-in, creating a limited privacy risk.

Mechanism

The telemetry payload includes the project domain and is posted to the SEOAgent telemetry endpoint.

AI rationale

Evidence

index.js

Network endpoints1

seoagent.com/api/cli/telemetry

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

When no credential is found, the CLI can send a telemetry event containing the project domain.
The event is posted to the SEOAgent telemetry endpoint.

Evidence against

The package describes the ping as anonymous and says it sends no paths or secrets.
Users can disable telemetry with SEOAGENT_TELEMETRY=0 or DO_NOT_TRACK.
The manifest exposes a CLI entry point and describes the package as an AI SEO agent.

Behavioral surface

Source

ChildProcessEnvironmentVarsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 459 KB of source, external domains: 127.0.0.1, api.openai.com, api.replicate.com, console.anthropic.com, example.com, fal.run, registry.npmjs.org, seoagent.com, www.google.com

Source & flagged code

6 flagged

index.jsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

index.jsView on unpkg · L9

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

Findings

2 Critical4 High4 Medium2 Low

CriticalSame File Env Network Executionindex.js

CriticalTrigger Reachable Dangerous Capabilityindex.js

HighChild Processindex.js

HighShell

HighCommand Output Exfiltrationindex.js

HighTrigger Reachable Command Output Exfiltrationindex.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumAi Review Evidenceindex.js

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @seoagent-official/seoagent@1.130.0.

See all versions of @seoagent-official/seoagent for other recorded verdicts.

Review the evidence and your use of @seoagent-official/seoagent@1.130.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-01 21:13:40.348Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface