registry / @seoagent-official/seoagent / 1.133.0
@seoagent-official/seoagent@1.133.0
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe flagged process execution supports Git inspection, URL opening, and requested agent tasks. Telemetry is disclosed, may include the project domain, and can be disabled; the reviewed credential checks do not reveal automatic transfer to an unrelated host.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
CLI commands trigger project analysis, cloud sync, image generation, or inbox processing; invoking without a command prints help.
Impact
No malicious credential transfer, install-time behavior, or unrelated automatic execution was found.
Mechanism
The CLI sends telemetry to its own service and uses credentials with the corresponding service or Claude Agent SDK for requested features. Local Claude credential checks establish session availability.
AI rationale
The flagged process execution supports Git inspection, URL opening, and requested agent tasks. Telemetry is disclosed, may include the project domain, and can be disabled; the reviewed credential checks do not reveal automatic transfer to an unrelated host.
Network endpoints2
seoagent.com/api/cli/telemetryapi.openai.com/v1/images/generations
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes index.js as a CLI and declares no lifecycle scripts.
- Runtime telemetry is disclosed as an anonymous ping that may include the project site domain, and users can opt out with SEOAGENT_TELEMETRY=0.
- Claude credential checks inspect local environment values, ~/.claude/.credentials.json, or the macOS keychain to determine whether a session is available.
- The inbox processing command describes using the Claude Agent SDK and the user's Claude login or ANTHROPIC_API_KEY.
- The CLI parses arguments and prints help when invoked without a command; no automatic harmful action was identified.
Evidence against
- Telemetry is enabled by default and may include the project's domain, but the package discloses this and provides an opt-out.
- The CLI executes Git and platform URL-opening commands, which support project inspection and user-requested features.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
Source & flagged code
6 flaggedindex.jsView file
9.sync-cursor
L10: `,Pg=process.env.XDG_CONFIG_HOME&&process.env.XDG_CONFIG_HOME.trim().length>0?process.env.XDG_CONFIG_HOME:Wt(Tg(),".config"),ne=Wt(Pg,"seoagent"),it=Wt(ne,"auth.json"),hi=Wt(ne,"st...
L11: `),i=Bg(r),s=i.length>0?i[0].indent:0,[a]=rl(i,0,s);return{data:a,body:o}}function st(e){if(!Fg(e))return null;try{return re(Ug(e,"utf-8"))}catch{return null}}function Hg(e){if(e==...
...
L15: `)?"":`
L16: `)}import{existsSync as Tr,readdirSync as Gg,statSync as Wg}from"fs";import{join as at}from"path";var bi=["svelte.config.js","svelte.config.ts","svelte.config.mjs","svelte.config.c...
L17: `).map(t=>t.trim()).filter(Boolean):[]}function Dr(e,t,n={}){let r=n.execGit??Zg,o=n.sourceExists??((h,w)=>Jg(Xg(h,w))),i=n.checkedCommit&&Lr.test(n.checkedCommit)?n.checkedCommit:...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L996Trigger-reachable chain: manifest.main -> index.js
L96:
L97: `))}function P(e,t,n,r=n){e?e.stop(r):d[t](n)}var Wc=[{suffixes:[".wordpress.com"],platform:{id:"wordpress.com",label:"WordPress.com",api:"wordpress",enableHint:"an application pas...
L98: `,"utf-8"),n}catch{return null}}import{execFileSync as Uy}from"child_process";var My=2048,By=200,Hy=10,Gy=/^[A-Za-z0-9._-]+$/,Wy=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-...
L99: `).replace(/\n+$/,`
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
Findings
2 Critical4 High3 Medium3 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighChild Processindex.js
HighShell
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.133.0.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.133.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.