registry / @seoagent-official/seoagent / 1.89.4

@seoagent-official/seoagent@1.89.4

The persistent AI SEO agent for Claude Code. Audits, keyword strategy, briefs, articles, real product screenshots from your repo, and the autopilot loop (cloud detects → CLI executes → ack closes) — other SEO tools write the prompt, SEOAgent runs it.

AI Security Review

scanned 16d ago · by lpm-firewall-ai

The manifest has no install lifecycle hook, and the CLI’s observed telemetry is service-aligned and invoked from a CLI flow. The scanner’s execution and network hints are consistent with session detection and product features; inspected source did not establish credential exfiltration or an unconsented agent configuration change.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A user runs the CLI reinitialization flow; the manifest defines no install lifecycle hook.

Impact

No confirmed attack surface was established from the inspected behavior.

Mechanism

The flow may send an install identifier, event, CLI version, and platform to the SEOAgent service. The inspected credential check reads Claude session state but does not show credential transmission.

AI rationale

Network endpoints1

seoagent.com

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes a CLI entrypoint and has no install lifecycle hook.
The `index.js` location referenced by the agent integration hint names `.claude/settings.json` as a path; this excerpt does not show a write to it.
The install ping is called from the CLI reinitialization flow and sends an install ID, event, CLI version, and platform to the package’s service.
Telemetry can be disabled with `SEOAGENT_TELEMETRY=0`, `false`, or `off`, or with `DO_NOT_TRACK=1` or `true`.
The Claude credential check uses the Claude OAuth environment variables and checks for an existing Claude session; the inspected code does not send those values.

Evidence against

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 309 KB of source, external domains: 127.0.0.1, api.openai.com, api.replicate.com, console.anthropic.com, example.com, fal.run, registry.npmjs.org, seoagent.com, www.google.com

Source & flagged code

7 flagged

index.jsView file

79- Bundle scaffolded. L80: `,"utf-8"),r.push("log.md")),{created:r,okfDir:n}}import{log as ht}from"@clack/prompts";var u={info:e=>ht.info(e),warn:e=>ht.warn(e),error:e=>ht.error(e),success:e=>ht.success(e),s... L81: `))}import{existsSync as Vs}from"fs";import{intro as up,outro as dp,confirm as pp,isCancel as fp,cancel as mp}from"@clack/prompts";import{existsSync as Jn,rmSync as cp}from"fs";imp... ... L86: ${o}`),!e.global&&Vs(W)&&u.info("Your seoagent.com login (~/.config/seoagent/) was kept \u2014 it is shared across projects. Run `uninstall --global` to wipe it too."),u.info(`Re-i... L87: `)}function Ep(e,t){if(!t)return De.dim(`\u250C${"\u2500".repeat(e-2)}\u2510`);let n=qt(t),r=e-5-n;return r<1?De.dim(`\u250C${"\u2500".repeat(e-2)}\u2510`):`${De.dim("\u250C\u2500 ... L88:

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

index.jsView on unpkg · L79

85Trigger-reachable chain: manifest.main -> index.js L85: ${o}`):dp(`Removed: L86: ${o}`),!e.global&&Vs(W)&&u.info("Your seoagent.com login (~/.config/seoagent/) was kept \u2014 it is shared across projects. Run `uninstall --global` to wipe it too."),u.info(`Re-i... L87: `)}function Ep(e,t){if(!t)return De.dim(`\u250C${"\u2500".repeat(e-2)}\u2510`);let n=qt(t),r=e-5-n;return r<1?De.dim(`\u250C${"\u2500".repeat(e-2)}\u2510`):`${De.dim("\u250C\u2500 ... L88:

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

Findings

2 Critical3 High3 Medium4 Low

CriticalSame File Env Network Executionindex.js

CriticalTrigger Reachable Dangerous Capabilityindex.js

HighCommand Output Exfiltrationindex.js

HighTrigger Reachable Command Output Exfiltrationindex.js

HighSemantic Analysis Limitedindex.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidenceindex.js

Affected versions and remediation

This report applies to @seoagent-official/seoagent@1.89.4.

See all versions of @seoagent-official/seoagent for other recorded verdicts.

Review the evidence and your use of @seoagent-official/seoagent@1.89.4 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-19 14:05:56.044Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / @seoagent-official/seoagent / 1.89.4

@seoagent-official/seoagent@1.89.4

AI Security Review

scanned 16d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A user runs the CLI reinitialization flow; the manifest defines no install lifecycle hook.

Impact

No confirmed attack surface was established from the inspected behavior.

Mechanism

The flow may send an install identifier, event, CLI version, and platform to the SEOAgent service. The inspected credential check reads Claude session state but does not show credential transmission.

AI rationale

Network endpoints1

seoagent.com

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes a CLI entrypoint and has no install lifecycle hook.
The `index.js` location referenced by the agent integration hint names `.claude/settings.json` as a path; this excerpt does not show a write to it.
The install ping is called from the CLI reinitialization flow and sends an install ID, event, CLI version, and platform to the package’s service.
Telemetry can be disabled with `SEOAGENT_TELEMETRY=0`, `false`, or `off`, or with `DO_NOT_TRACK=1` or `true`.
The Claude credential check uses the Claude OAuth environment variables and checks for an existing Claude session; the inspected code does not send those values.

Evidence against

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 309 KB of source, external domains: 127.0.0.1, api.openai.com, api.replicate.com, console.anthropic.com, example.com, fal.run, registry.npmjs.org, seoagent.com, www.google.com

Source & flagged code

7 flagged

index.jsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

index.jsView on unpkg · L79

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

Findings

2 Critical3 High3 Medium4 Low

CriticalSame File Env Network Executionindex.js

CriticalTrigger Reachable Dangerous Capabilityindex.js

HighCommand Output Exfiltrationindex.js

HighTrigger Reachable Command Output Exfiltrationindex.js

HighSemantic Analysis Limitedindex.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidenceindex.js

Affected versions and remediation

This report applies to @seoagent-official/seoagent@1.89.4.

See all versions of @seoagent-official/seoagent for other recorded verdicts.

Review the evidence and your use of @seoagent-official/seoagent@1.89.4 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-19 14:05:56.044Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.