registry / @seoagent-official/seoagent / 1.130.1
@seoagent-official/seoagent@1.130.1
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe source behavior matches the package’s stated purpose as an SEO agent CLI. Although it has powerful agent and shell capabilities, the inspected credential, network, and telemetry flows did not show an attack.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The CLI runs when a user invokes a command; task execution occurs when an agent task is requested.
Impact
The inspected behavior supports the advertised CLI features. No automatic credential exfiltration or unrelated command-output collection was identified.
Mechanism
The agent SDK uses the configured Anthropic credentials for task prompts. The CLI also contacts its own service and configured image-provider APIs; inspected telemetry sends package-use event metadata and supports opt-out.
AI rationale
The source behavior matches the package’s stated purpose as an SEO agent CLI. Although it has powerful agent and shell capabilities, the inspected credential, network, and telemetry flows did not show an attack.
Network endpoints5
seoagent.comapi.openai.comfal.runapi.replicate.comregistry.npmjs.org
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies this as an SEO agent CLI and exposes index.js as its command entry point; it defines no lifecycle scripts.
- Anthropic credential checks occur in the agent integration, which invokes the Claude Agent SDK for task execution.
- The unattended agent path is called with a task prompt and has explicit budget and turn limits.
- Telemetry code documents the event data and an opt-out; the inspected sender submits an install ID, event, CLI version, and platform.
Evidence against
- The entry point uses child-process execution and grants the agent Bash access, including a bypass-permissions mode for unattended tasks; these capabilities are part of its described agent function.
- The package has runtime network access to SEOAgent and image-provider APIs for its CLI features.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedindex.jsView file
9.sync-cursor
L10: `,Sg=process.env.XDG_CONFIG_HOME&&process.env.XDG_CONFIG_HOME.trim().length>0?process.env.XDG_CONFIG_HOME:Mt($g(),".config"),te=Mt(Sg,"seoagent"),nt=Mt(te,"auth.json"),di=Mt(te,"st...
L11: `),i=Ng(r),s=i.length>0?i[0].indent:0,[a]=el(i,0,s);return{data:a,body:o}}function rt(e){if(!Ig(e))return null;try{return ne(Og(e,"utf-8"))}catch{return null}}function Dg(e){if(e==...
...
L15: `)?"":`
L16: `)}import{existsSync as Rr,readdirSync as jg,statSync as Fg}from"fs";import{join as ot}from"path";var hi=["svelte.config.js","svelte.config.ts","svelte.config.mjs","svelte.config.c...
L17: `).map(t=>t.trim()).filter(Boolean):[]}function Ir(e,t,n={}){let r=n.execGit??Vg,o=n.sourceExists??((h,w)=>Wg(Kg(h,w))),i=n.checkedCommit&&Pr.test(n.checkedCommit)?n.checkedCommit:...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L996Trigger-reachable chain: manifest.main -> index.js
L96:
L97: `))}function P(e,t,n,r=n){e?e.stop(r):d[t](n)}var Bc=[{suffixes:[".wordpress.com"],platform:{id:"wordpress.com",label:"WordPress.com",api:"wordpress",enableHint:"an application pas...
L98: `,"utf-8"),n}catch{return null}}import{execFileSync as Oy}from"child_process";var Ly=2048,Ny=200,Dy=10,jy=/^[A-Za-z0-9._-]+$/,Fy=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-...
L99: `).replace(/\n+$/,`
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
Findings
2 Critical4 High3 Medium3 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighChild Processindex.js
HighShell
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.130.1.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.130.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.