registry / @seoagent-official/seoagent / 1.131.1
@seoagent-official/seoagent@1.131.1
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe flagged code checks for the user’s Claude authentication and runs an agent only through the CLI workflow. Its shell access and network requests serve the package’s SEO features, and the reviewed source did not show credentials being sent to an unrelated host.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
User runs a CLI command; agent processing requires the `process` command, and unattended operation requires explicit flags.
Impact
No unauthorized credential transfer, install-time collection, or unrelated automatic action was identified.
Mechanism
The CLI checks Claude authentication state, runs the Claude Agent SDK for requested work, and sends disclosed, opt-out telemetry.
AI rationale
The flagged code checks for the user’s Claude authentication and runs an agent only through the CLI workflow. Its shell access and network requests serve the package’s SEO features, and the reviewed source did not show credentials being sent to an unrelated host.
Evidence
.seoagent/~/.config/seoagent/auth.json
Network endpoints4
seoagent.comapi.openai.comfal.runapi.replicate.com
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes `index.js` as the `seoagent` CLI entry point.
- The `process` command is explicitly invoked by the user and describes running the Claude Agent SDK with the user’s Claude login or API key.
- The SDK receives the project directory and uses file and shell tools for the agent workflow; unattended permission bypass is an explicit command option.
- Telemetry is described as an anonymous install or project ping, includes an opt-out, and sends an install ID, event, CLI version, platform, and optional metadata.
Evidence against
- The CLI checks for existing Claude credentials to determine whether the user can run its agent feature.
- The agent can run shell commands and send project work to Claude, which is expected for this package’s stated purpose.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedindex.jsView file
9.sync-cursor
L10: `,Ag=process.env.XDG_CONFIG_HOME&&process.env.XDG_CONFIG_HOME.trim().length>0?process.env.XDG_CONFIG_HOME:Wt(Eg(),".config"),ne=Wt(Ag,"seoagent"),it=Wt(ne,"auth.json"),fi=Wt(ne,"st...
L11: `),i=Fg(r),s=i.length>0?i[0].indent:0,[a]=tl(i,0,s);return{data:a,body:o}}function st(e){if(!Lg(e))return null;try{return re(Dg(e,"utf-8"))}catch{return null}}function Ug(e){if(e==...
...
L15: `)?"":`
L16: `)}import{existsSync as Cr,readdirSync as Mg,statSync as Bg}from"fs";import{join as at}from"path";var yi=["svelte.config.js","svelte.config.ts","svelte.config.mjs","svelte.config.c...
L17: `).map(t=>t.trim()).filter(Boolean):[]}function Lr(e,t,n={}){let r=n.execGit??Jg,o=n.sourceExists??((h,w)=>Vg(Yg(h,w))),i=n.checkedCommit&&Nr.test(n.checkedCommit)?n.checkedCommit:...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L996Trigger-reachable chain: manifest.main -> index.js
L96:
L97: `))}function P(e,t,n,r=n){e?e.stop(r):d[t](n)}var Hc=[{suffixes:[".wordpress.com"],platform:{id:"wordpress.com",label:"WordPress.com",api:"wordpress",enableHint:"an application pas...
L98: `,"utf-8"),n}catch{return null}}import{execFileSync as Dy}from"child_process";var jy=2048,Fy=200,Uy=10,My=/^[A-Za-z0-9._-]+$/,By=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-...
L99: `).replace(/\n+$/,`
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
Findings
2 Critical4 High3 Medium3 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighChild Processindex.js
HighShell
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencepackage.json
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.131.1.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.131.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.