registry / @seoagent-official/seoagent / 1.133.1
@seoagent-official/seoagent@1.133.1
The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.
AI Security Review
scanned 18h ago · by lpm-firewall-aiThe manifest exposes a CLI without lifecycle scripts, and the inspected entrypoint dispatches user-invoked commands. It uses the Claude agent SDK and SEOAgent service for its stated SEO workflow; the identified runtime telemetry is described in the source and has an opt-out.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The user invokes a CLI command; project edits and unattended processing occur through requested commands or modes.
Impact
No malicious impact identified; the CLI can make project edits as part of its intended SEO-agent functionality.
Mechanism
The CLI reads project data, uses agent tools for SEO work, and makes requests to SEOAgent or user-configured service endpoints. Telemetry has an opt-out.
AI rationale
The manifest exposes a CLI without lifecycle scripts, and the inspected entrypoint dispatches user-invoked commands. It uses the Claude agent SDK and SEOAgent service for its stated SEO workflow; the identified runtime telemetry is described in the source and has an opt-out.
Evidence
~/.config/seoagent/auth.json.seoagent/CLAUDE skills directory: .claude/skills/seoagent/AGENTS.md
Network endpoints5
seoagent.comregistry.npmjs.orgapi.openai.comapi.replicate.comfal.run
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI entry point at index.js and describes SEO agent functionality.
- The CLI uses seoagent.com by default and allows users to set SEOAGENT_API_BASE.
- The source describes telemetry as anonymous, names an opt-out, and sends it to the service telemetry endpoint.
- The Claude agent SDK receives a project directory and prompt; unattended permission bypass is limited to the unattended mode.
Evidence against
- The CLI reads project files and can use shell and file-editing tools to perform SEO tasks.
- The CLI includes runtime telemetry, including a project-domain ping in some flows.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedindex.jsView file
9.sync-cursor
L10: `,Ig=process.env.XDG_CONFIG_HOME&&process.env.XDG_CONFIG_HOME.trim().length>0?process.env.XDG_CONFIG_HOME:Wt(Pg(),".config"),re=Wt(Ig,"seoagent"),it=Wt(re,"auth.json"),mi=Wt(re,"st...
L11: `),i=Hg(r),s=i.length>0?i[0].indent:0,[a]=ol(i,0,s);return{data:a,body:o}}function st(e){if(!Ug(e))return null;try{return oe(Mg(e,"utf-8"))}catch{return null}}function Gg(e){if(e==...
...
L15: `)?"":`
L16: `)}import{existsSync as Tr,readdirSync as Wg,statSync as Kg}from"fs";import{join as at}from"path";var ki=["svelte.config.js","svelte.config.ts","svelte.config.mjs","svelte.config.c...
L17: `).map(t=>t.trim()).filter(Boolean):[]}function Dr(e,t,n={}){let r=n.execGit??eh,o=n.sourceExists??((m,w)=>Xg(Qg(m,w))),i=n.checkedCommit&&Lr.test(n.checkedCommit)?n.checkedCommit:...
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
index.jsView on unpkg · L996Trigger-reachable chain: manifest.main -> index.js
L96:
L97: `))}function T(e,t,n,r=n){e?e.stop(r):d[t](n)}var Kc=[{suffixes:[".wordpress.com"],platform:{id:"wordpress.com",label:"WordPress.com",api:"wordpress",enableHint:"an application pas...
L98: `,"utf-8"),n}catch{return null}}import{execFileSync as My}from"child_process";var By=2048,Hy=200,Gy=10,Wy=/^[A-Za-z0-9._-]+$/,Ky=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-...
L99: `).replace(/\n+$/,`
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
Findings
2 Critical5 High3 Medium2 Low
CriticalSame File Env Network Executionindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighChild Processindex.js
HighShell
HighCommand Output Exfiltrationindex.js
HighTrigger Reachable Command Output Exfiltrationindex.js
HighSemantic Analysis Limitedindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @seoagent-official/seoagent@1.133.1.
See all versions of @seoagent-official/seoagent for other recorded verdicts.
- Review the evidence and your use of @seoagent-official/seoagent@1.133.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.